Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechanism for codebase principals and execute arbitrary script via the -moz-binding CSS property in a signed JAR file.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade seamonkey-nspr-develUpgrade seamonkey-chatUpgrade devhelpUpgrade seamonkey-develUpgrade xulrunner-devel-unstableUpgrade nss-toolsUpgrade nssUpgrade seamonkey-nss-develUpgrade nss-develUpgrade seamonkey-nsprUpgrade nss-pkcs11-develUpgrade seamonkey-mailUpgrade seamonkey-js-debuggerUpgrade devhelp-develUpgrade firefoxUpgrade seamonkey-dom-inspectorUpgrade xulrunner-develUpgrade seamonkeyUpgrade yelpUpgrade seamonkey-nss | Dec 1, 2016 | Nov 13, 2008 |
| Freebsd | — | Upgrade firefoxUpgrade seamonkeyUpgrade thunderbirdUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade linux-firefox | Dec 10, 2025 | Nov 13, 2008 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Nov 13, 2008 |
| Mfsa2008 57 | — | Upgrade to Mozilla Firefox version 3.0.4Upgrade to Mozilla Firefox version 2.0.0.18 | Jun 14, 2012 | Nov 13, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.13 | Feb 3, 2012 | Nov 13, 2008 |
| Oracle_linux | — | Upgrade devhelpUpgrade yelpUpgrade xulrunner-develUpgrade nss-develUpgrade nssUpgrade nss-toolsUpgrade firefoxUpgrade devhelp-develUpgrade xulrunnerUpgrade nss-pkcs11-develUpgrade xulrunner-devel-unstable | Oct 16, 2024 | Nov 13, 2008 |
| Suse | — | Upgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade gecko-sdkUpgrade mozilla-dom-inspectorUpgrade mozilla-xulrunner190-64bitUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner190-develUpgrade mozilla-xulrunner181-64bitUpgrade epiphany-develUpgrade seamonkey-dom-inspectorUpgrade mozilla-csUpgrade mozillaUpgrade mozilla-deatUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-xulrunner181-develUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner190-translationsUpgrade seamonkeyUpgrade mozilla-xulrunner190Upgrade mozilla-mailUpgrade seamonkey-spellcheckerUpgrade mozilla-xulrunner190-32bitUpgrade epiphany-extensionsUpgrade mozilla-xulrunner181Upgrade mozilla-calendarUpgrade suse-releaseUpgrade mozilla-xulrunner190-translations-32bitUpgrade mozilla-venkmanUpgrade seamonkey-mailUpgrade MozillaFirefoxUpgrade mozilla-huUpgrade mozilla-ircUpgrade mozilla-xulrunner190-translations-64bitUpgrade mozilla-develUpgrade seamonkey-ircUpgrade mozilla-xulrunner181-32bitUpgrade epiphany-docUpgrade epiphany | Feb 17, 2015 | Nov 13, 2008 |
| Ubuntu | — | Upgrade firefoxUpgrade abrowserUpgrade xulrunner-1.9Upgrade firefox-3.0 | Nov 8, 2024 | Nov 13, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub