---
title: "CVE-2007-4879\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2007-4879?format=md
keywords: index, follow
---

# CVE-2007-4879

Publication date 13 September 2007

Last updated 24 July 2024

---

Ubuntu priority

**Low**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

Mozilla Firefox before Firefox 2.0.0.13, and SeaMonkey before 1.1.9, can
automatically install TLS client certificates with minimal user
interaction, and automatically sends these certificates when requested,
which makes it easier for remote web sites to track user activities across
domains by requesting the TLS client certificates from other domains.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| firefox | 7.10 gutsy | Fixed 2.0.0.13+1nobinonly-0ubuntu0.7.10 |
| 7.04 feisty | Fixed 2.0.0.13+0nobinonly-0ubuntu0.7.4 |
| 6.10 edgy | Fixed 2.0.0.13+0nobinonly-0ubuntu0.6.10 |
| 6.06 LTS dapper | Not affected |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4879)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2007-4879)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2007-4879)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2007-4879)

### Related Ubuntu Security Notices (USN)

+ [USN-592-1](https://usn.ubuntu.com/USN-592-1)
+ Firefox vulnerabilities
+ 26 March 2008

### Other references

* <https://bugzilla.mozilla.org/show_bug.cgi?id=395399>
* <https://www.cve.org/CVERecord?id=CVE-2007-4879>
