The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL bindings.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-nssUpgrade seamonkey-develUpgrade seamonkey-mailUpgrade seamonkey-nss-develUpgrade seamonkey-nsprUpgrade seamonkey-js-debuggerUpgrade seamonkeyUpgrade seamonkey-chatUpgrade thunderbirdUpgrade seamonkey-dom-inspectorUpgrade seamonkey-nspr-devel | Dec 1, 2016 | Dec 17, 2008 |
| Freebsd | — | Upgrade linux-firefoxUpgrade seamonkeyUpgrade thunderbirdUpgrade firefoxUpgrade linux-thunderbirdUpgrade linux-seamonkey | Dec 10, 2025 | Dec 19, 2008 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Dec 17, 2008 |
| Mfsa2008 61 | — | Upgrade to Mozilla Firefox version 2.0.0.19 | Jun 14, 2012 | Dec 17, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.14 | Feb 3, 2012 | Dec 17, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.19 | Feb 22, 2012 | Dec 17, 2008 |
| Suse | — | Upgrade epiphanyUpgrade mozilla-mailUpgrade mozilla-xulrunner190-develUpgrade seamonkey-ircUpgrade mozilla-xulrunner181-32bitUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner190-translations-32bitUpgrade seamonkey-spellcheckerUpgrade mozilla-xulrunner190-translationsUpgrade seamonkey-mailUpgrade mozilla-deatUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-csUpgrade mozilla-xulrunner190-translations-64bitUpgrade mozilla-ircUpgrade mozilla-xulrunner181Upgrade mozilla-xulrunner181-l10n-32bitUpgrade mozilla-develUpgrade seamonkeyUpgrade python-xpcom190Upgrade mozilla-xulrunner181-develUpgrade MozillaThunderbird-develUpgrade mozilla-venkmanUpgrade MozillaThunderbird-translationsUpgrade mozilla-xulrunner190-64bitUpgrade seamonkey-dom-inspectorUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner181-64bitUpgrade gecko-sdkUpgrade mozilla-calendarUpgrade mozillaUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-dom-inspectorUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-huUpgrade seamonkey-venkmanUpgrade MozillaFirefox-translationsUpgrade MozillaFirefox | Feb 17, 2015 | Dec 17, 2008 |
| Ubuntu | — | Upgrade thunderbirdUpgrade mozilla-thunderbirdUpgrade firefox | Nov 8, 2024 | Dec 17, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub