The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via byte order mark (BOM) characters that are removed from JavaScript code before execution, aka "Stripped BOM characters bug."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-chatUpgrade firefoxUpgrade thunderbirdUpgrade seamonkeyUpgrade devhelp-develUpgrade seamonkey-develUpgrade devhelpUpgrade seamonkey-js-debuggerUpgrade seamonkey-dom-inspectorUpgrade seamonkey-mail | Dec 1, 2016 | Sep 24, 2008 |
| Freebsd | — | Upgrade linux-firefox-develUpgrade linux-seamonkey-develUpgrade thunderbirdUpgrade flockUpgrade linux-firefoxUpgrade firefoxUpgrade seamonkeyUpgrade linux-flockUpgrade linux-thunderbirdUpgrade linux-seamonkey | Dec 10, 2025 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/icecat.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade dev-libs/nss. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 43 | — | Upgrade to Mozilla Firefox version 2.0.0.17Upgrade to Mozilla Firefox version 3.0.2 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.17 | Feb 22, 2012 | Sep 24, 2008 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade nssUpgrade nss-toolsUpgrade devhelpUpgrade nss-develUpgrade yelpUpgrade devhelp-develUpgrade firefoxUpgrade nss-pkcs11-devel | Oct 16, 2024 | Sep 24, 2008 |
| Suse | — | Upgrade mozilla-xulrunner181-32bitUpgrade mozilla-xulrunner181-64bitUpgrade mozillaUpgrade mozilla-dom-inspectorUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-xulrunner190-translations-32bitUpgrade seamonkey-spellcheckerUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner181Upgrade seamonkey-venkmanUpgrade mozilla-huUpgrade mozilla-calendarUpgrade mozilla-xulrunner190-translations-64bitUpgrade seamonkey-mailUpgrade mozilla-csUpgrade mozilla-mailUpgrade MozillaThunderbird-develUpgrade suse-releaseUpgrade seamonkey-ircUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade gecko-sdkUpgrade mozilla-deatUpgrade mozilla-develUpgrade mozilla-xulrunner181-develUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-venkmanUpgrade MozillaFirefoxUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-xulrunner190-64bitUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-develUpgrade MozillaThunderbird-translationsUpgrade mozilla-ircUpgrade seamonkeyUpgrade seamonkey-dom-inspectorUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner190-translations | Feb 17, 2015 | Sep 24, 2008 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade firefoxUpgrade thunderbirdUpgrade mozilla-thunderbirdUpgrade firefox-3.0 | Nov 8, 2024 | Sep 24, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub