The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly escape quote characters used for XML processing, which allows remote attackers to conduct XML injection attacks via the default namespace in an E4X document.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade seamonkey-chatUpgrade seamonkey-nspr-develUpgrade nssUpgrade firefoxUpgrade xulrunnerUpgrade nss-toolsUpgrade seamonkey-nsprUpgrade seamonkey-nssUpgrade nss-develUpgrade xulrunner-develUpgrade devhelp-develUpgrade seamonkey-js-debuggerUpgrade seamonkeyUpgrade seamonkey-dom-inspectorUpgrade devhelpUpgrade seamonkey-mailUpgrade seamonkey-nss-develUpgrade nss-pkcs11-develUpgrade xulrunner-devel-unstableUpgrade seamonkey-develUpgrade yelp | Dec 1, 2016 | Nov 13, 2008 |
| Freebsd | — | Upgrade thunderbirdUpgrade firefoxUpgrade seamonkeyUpgrade linux-thunderbirdUpgrade linux-firefoxUpgrade linux-seamonkey | Dec 10, 2025 | Nov 13, 2008 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/icecat.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Nov 13, 2008 |
| Mfsa2008 58 | — | Upgrade to Mozilla Firefox version 3.0.4Upgrade to Mozilla Firefox version 2.0.0.18 | Jun 14, 2012 | Nov 13, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.13 | Feb 3, 2012 | Nov 13, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.18 | Feb 22, 2012 | Nov 13, 2008 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade nssUpgrade xulrunnerUpgrade devhelp-develUpgrade xulrunner-devel-unstableUpgrade nss-develUpgrade nss-pkcs11-develUpgrade devhelpUpgrade yelpUpgrade firefoxUpgrade nss-tools | Oct 16, 2024 | Nov 13, 2008 |
| Suse | — | Upgrade mozilla-calendarUpgrade mozilla-xulrunner190-translations-64bitUpgrade seamonkey-ircUpgrade epiphany-develUpgrade mozilla-xulrunner190-64bitUpgrade mozilla-xulrunner181-32bitUpgrade MozillaThunderbird-develUpgrade MozillaFirefox-translationsUpgrade mozillaUpgrade mozilla-huUpgrade mozilla-xulrunner190Upgrade epiphany-extensionsUpgrade epiphany-docUpgrade suse-releaseUpgrade gecko-sdkUpgrade mozilla-venkmanUpgrade MozillaFirefoxUpgrade mozilla-xulrunner190-32bitUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-xulrunner181Upgrade mozilla-csUpgrade mozilla-deatUpgrade mozilla-mailUpgrade MozillaThunderbird-translationsUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-ircUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner181-64bitUpgrade mozilla-dom-inspectorUpgrade seamonkeyUpgrade epiphanyUpgrade mozilla-xulrunner190-translations-32bitUpgrade seamonkey-dom-inspectorUpgrade mozilla-xulrunner190-develUpgrade mozilla-develUpgrade seamonkey-spellcheckerUpgrade seamonkey-mailUpgrade mozilla-xulrunner181-devel | Feb 17, 2015 | Nov 13, 2008 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade firefox-3.0Upgrade thunderbirdUpgrade firefoxUpgrade abrowserUpgrade mozilla-thunderbird | Nov 8, 2024 | Nov 13, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub