The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chrome privileges via vectors related to (1) chrome XBL and (2) chrome JS.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-chatUpgrade seamonkey-js-debuggerUpgrade seamonkey-develUpgrade seamonkey-mailUpgrade devhelp-develUpgrade firefoxUpgrade seamonkey-dom-inspectorUpgrade seamonkeyUpgrade thunderbirdUpgrade devhelp | Dec 1, 2016 | Sep 24, 2008 |
| Freebsd | — | Upgrade seamonkeyUpgrade firefoxUpgrade linux-firefoxUpgrade linux-flockUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade linux-firefox-develUpgrade flockUpgrade linux-seamonkey-develUpgrade linux-thunderbird | Dec 10, 2025 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/icecat.Upgrade net-libs/xulrunner-bin.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird-bin. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 41 | — | Upgrade to Mozilla Firefox version 2.0.0.17Upgrade to Mozilla Firefox version 3.0.2 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.17 | Feb 22, 2012 | Sep 24, 2008 |
| Oracle_linux | — | Upgrade yelpUpgrade devhelp-develUpgrade xulrunner-devel-unstableUpgrade nss-develUpgrade devhelpUpgrade nss-pkcs11-develUpgrade nssUpgrade xulrunner-develUpgrade nss-toolsUpgrade xulrunnerUpgrade firefox | Oct 16, 2024 | Sep 24, 2008 |
| Suse | — | Upgrade mozilla-xulrunner181-64bitUpgrade mozilla-huUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-xulrunner190-translations-64bitUpgrade mozilla-csUpgrade mozilla-xulrunner181-develUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-venkmanUpgrade mozilla-xulrunner190-develUpgrade mozilla-xulrunner190-gnomevfsUpgrade gecko-sdkUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-develUpgrade mozilla-xulrunner190-translationsUpgrade MozillaThunderbird-translationsUpgrade seamonkey-dom-inspectorUpgrade seamonkeyUpgrade MozillaFirefoxUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-deatUpgrade seamonkey-ircUpgrade mozilla-ircUpgrade mozilla-mailUpgrade mozilla-xulrunner190-64bitUpgrade MozillaFirefox-translationsUpgrade mozilla-calendarUpgrade mozillaUpgrade mozilla-dom-inspectorUpgrade mozilla-xulrunner190-translations-32bitUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner181Upgrade seamonkey-spellcheckerUpgrade suse-releaseUpgrade mozilla-xulrunner181-32bitUpgrade seamonkey-mailUpgrade MozillaThunderbird | Feb 17, 2015 | Sep 24, 2008 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade firefox-3.0Upgrade mozilla-thunderbirdUpgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Sep 24, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub