CVE-2009-0357

CVE-2009-0357 describes an information disclosure vulnerability in Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15. This flaw allows remote attackers to bypass the HTTPOnly protection mechanism and extract sensitive cookie information via XMLHttpRequest calls by improperly restricting access to Set-Cookie and Set-Cookie2 HTTP response headers. With a CVSS score of 5.0 (Medium), this vulnerability is network-exploitable with low attack complexity, potentially leading to the disclosure of sensitive user data. There is no evidence of active exploitation, nor is exploit code publicly available in Metasploit or ExploitDB, and it has received negligible community discussion or media coverage.