The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly implement JAR signing, which allows remote attackers to execute arbitrary code via (1) injection of JavaScript into documents within a JAR archive or (2) a JAR archive that uses relative URLs to JavaScript files.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade firefoxUpgrade xulrunnerUpgrade devhelp-develUpgrade devhelpUpgrade yelp | Dec 1, 2016 | Jul 7, 2008 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Jul 7, 2008 |
| Mfsa2008 23 | — | Upgrade to Mozilla Firefox version 3.0Upgrade to Mozilla Firefox version 2.0.0.15 | Jun 14, 2012 | Jul 7, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.10 | Feb 3, 2012 | Jul 7, 2008 |
| Oracle_linux | — | Upgrade devhelp-develUpgrade devhelpUpgrade firefoxUpgrade yelpUpgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade xulrunner-devel | Oct 16, 2024 | Jul 7, 2008 |
| Suse | — | Upgrade seamonkey-venkmanUpgrade MozillaFirefox-translationsUpgrade seamonkey-spellcheckerUpgrade seamonkeyUpgrade MozillaFirefoxUpgrade seamonkey-mailUpgrade seamonkey-dom-inspectorUpgrade suse-releaseUpgrade seamonkey-irc | Feb 17, 2015 | Jul 7, 2008 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Jul 7, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub