The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code via unknown vectors.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-mailUpgrade seamonkey-develUpgrade seamonkey-js-debuggerUpgrade seamonkey-chatUpgrade thunderbirdUpgrade seamonkeyUpgrade seamonkey-dom-inspector | Dec 1, 2016 | Sep 24, 2008 |
| Freebsd | — | Upgrade linux-firefox-develUpgrade linux-seamonkey-develUpgrade linux-flockUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade flockUpgrade thunderbirdUpgrade seamonkeyUpgrade firefox | Dec 10, 2025 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 38 | — | Upgrade to Mozilla Firefox version 2.0.0.17 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.17 | Feb 22, 2012 | Sep 24, 2008 |
| Suse | — | Upgrade mozilla-dom-inspectorUpgrade mozilla-mailUpgrade seamonkey-mailUpgrade seamonkey-spellcheckerUpgrade mozilla-huUpgrade mozilla-develUpgrade MozillaFirefox-translationsUpgrade mozilla-csUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-ircUpgrade suse-releaseUpgrade mozilla-xulrunner181-32bitUpgrade mozilla-venkmanUpgrade mozilla-deatUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner181-develUpgrade seamonkeyUpgrade seamonkey-dom-inspectorUpgrade mozilla-calendarUpgrade seamonkey-ircUpgrade gecko-sdkUpgrade MozillaFirefoxUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner181-64bitUpgrade mozillaUpgrade MozillaThunderbird-translationsUpgrade mozilla-xulrunner181Upgrade seamonkey-venkman | Feb 17, 2015 | Sep 24, 2008 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade thunderbirdUpgrade mozilla-thunderbirdUpgrade firefox-3.0Upgrade firefox | Nov 8, 2024 | Sep 24, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub