| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | ≥ 24.1.0, < 24.1.1< 17.0.11< 25.0.1 | 24.1.117.0.1125.0.1 |
| seamonkey | < 2.22.1 | 2.22.1 |
| thunderbird | < 24.1.1 | 24.1.1 |
| thunderbird esr | < 17.0.11 | 17.0.11 |
| communications application session controller | ≥ 3.0.0, ≤ 3.9.1 | |
| http server | = 11.1.1.7.0= 11.1.1.9.0= 12.1.3.0.0= 12.2.1.1.0= 12.2.1.2.0 |
The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free