The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a resource in a different domain, then reading content from the response, aka "response disclosure."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nsprUpgrade thunderbirdUpgrade nss-pkcs11-develUpgrade seamonkey-mailUpgrade xulrunner-develUpgrade firefoxUpgrade seamonkeyUpgrade seamonkey-dom-inspectorUpgrade seamonkey-nssUpgrade seamonkey-js-debuggerUpgrade nspr-develUpgrade xulrunner-devel-unstableUpgrade seamonkey-develUpgrade nss-develUpgrade seamonkey-nss-develUpgrade nssUpgrade nss-toolsUpgrade seamonkey-chatUpgrade xulrunnerUpgrade seamonkey-nspr-develUpgrade seamonkey-nspr | Dec 1, 2016 | Dec 17, 2008 |
| Freebsd | — | Upgrade seamonkeyUpgrade thunderbirdUpgrade firefoxUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade linux-thunderbird | Dec 10, 2025 | Dec 19, 2008 |
| Gentoo Linux | — | Upgrade www-client/icecat.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nss. | Oct 30, 2017 | Dec 17, 2008 |
| Mfsa2008 64 | — | Upgrade to Mozilla Firefox version 3.0.5Upgrade to Mozilla Firefox version 2.0.0.19 | Jun 14, 2012 | Dec 17, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.14 | Feb 3, 2012 | Dec 17, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.19 | Feb 22, 2012 | Dec 17, 2008 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade nss-pkcs11-develUpgrade xulrunner-devel-unstableUpgrade nssUpgrade nsprUpgrade nss-develUpgrade xulrunner-develUpgrade firefoxUpgrade nss-toolsUpgrade nspr-devel | Oct 16, 2024 | Dec 17, 2008 |
| Suse | — | Upgrade mozilla-csUpgrade MozillaThunderbird-translationsUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner190-translations-32bitUpgrade seamonkey-spellcheckerUpgrade seamonkey-ircUpgrade mozilla-xulrunner181Upgrade mozilla-mailUpgrade seamonkey-mailUpgrade mozilla-xulrunner181-32bitUpgrade python-xpcom190Upgrade mozilla-xulrunner190-translations-64bitUpgrade mozilla-ircUpgrade mozilla-xulrunner181-l10n-32bitUpgrade mozilla-huUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade MozillaThunderbird-develUpgrade mozilla-develUpgrade MozillaFirefox-translationsUpgrade seamonkeyUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-xulrunner190-translationsUpgrade seamonkey-dom-inspectorUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-dom-inspectorUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-64bitUpgrade mozilla-xulrunner181-64bitUpgrade MozillaFirefoxUpgrade mozilla-deatUpgrade mozilla-xulrunner190-develUpgrade mozillaUpgrade mozilla-venkmanUpgrade epiphanyUpgrade mozilla-calendarUpgrade mozilla-xulrunner181-develUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-xulrunner190-32bitUpgrade gecko-sdk | Feb 17, 2015 | Dec 17, 2008 |
| Ubuntu | — | Upgrade thunderbirdUpgrade abrowserUpgrade firefox-3.0Upgrade mozilla-thunderbirdUpgrade firefoxUpgrade xulrunner-1.9 | Nov 8, 2024 | Dec 17, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub