The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code via unknown vectors.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-develUpgrade seamonkey-mailUpgrade seamonkey-js-debuggerUpgrade seamonkey-chatUpgrade seamonkey-dom-inspectorUpgrade thunderbirdUpgrade seamonkey | Dec 1, 2016 | Sep 24, 2008 |
| Freebsd | — | Upgrade linux-firefox-develUpgrade linux-flockUpgrade linux-seamonkey-develUpgrade linux-thunderbirdUpgrade firefoxUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade flockUpgrade seamonkey | Dec 10, 2025 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner.Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade dev-libs/nss.Upgrade www-client/firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 38 | — | Upgrade to Mozilla Firefox version 2.0.0.17 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.17 | Feb 22, 2012 | Sep 24, 2008 |
| Suse | — | Upgrade mozilla-develUpgrade seamonkey-ircUpgrade mozilla-ircUpgrade suse-releaseUpgrade mozilla-deatUpgrade seamonkeyUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-csUpgrade mozilla-venkmanUpgrade mozilla-xulrunner181-32bitUpgrade MozillaThunderbirdUpgrade mozilla-calendarUpgrade seamonkey-dom-inspectorUpgrade MozillaFirefoxUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner181-develUpgrade gecko-sdkUpgrade seamonkey-venkmanUpgrade mozilla-huUpgrade seamonkey-spellcheckerUpgrade MozillaThunderbird-develUpgrade mozilla-mailUpgrade mozilla-xulrunner181-64bitUpgrade mozilla-dom-inspectorUpgrade mozillaUpgrade mozilla-xulrunner181Upgrade MozillaThunderbird-translationsUpgrade seamonkey-mail | Feb 17, 2015 | Sep 24, 2008 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade firefox-3.0Upgrade mozilla-thunderbirdUpgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Sep 24, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub