The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an "in-session phishing attack."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade devhelpUpgrade totem-develUpgrade gnome-python2-extrasUpgrade gnome-python2-gtkspellUpgrade yelpUpgrade totemUpgrade devhelp-develUpgrade gnome-python2-libeggUpgrade totem-mozpluginUpgrade gnome-python2-gtkmozembedUpgrade xulrunnerUpgrade gnome-python2-gtkhtml2Upgrade firefoxUpgrade escUpgrade xulrunner-devel | Dec 1, 2016 | Jan 20, 2009 |
| Freebsd | — | Upgrade seamonkeyUpgrade firefoxUpgrade thunderbirdUpgrade linux-firefox-devel | Dec 10, 2025 | Jun 23, 2010 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nss.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/icecat.Upgrade net-libs/xulrunner. | Oct 30, 2017 | Jan 20, 2009 |
| Mfsa2010 33 | — | Upgrade to Mozilla Firefox version 3.6.9Upgrade to Mozilla Firefox version 3.5.12 | Jun 14, 2012 | Jan 20, 2009 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.5 | Feb 3, 2012 | Jan 20, 2009 |
| Oracle_linux | — | Upgrade gnome-python2-gtkmozembedUpgrade totem-develUpgrade yelpUpgrade gnome-python2-libeggUpgrade devhelp-develUpgrade escUpgrade devhelpUpgrade xulrunnerUpgrade xulrunner-develUpgrade gnome-python2-extrasUpgrade totem-mozpluginUpgrade totemUpgrade gnome-python2-gtkspellUpgrade gnome-python2-gtkhtml2Upgrade firefox | Oct 16, 2024 | Jan 20, 2009 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 13, 2009 |
| Suse | — | Upgrade mozilla-xulrunner191Upgrade mozilla-nss-32bitUpgrade mozilla-nss-x86Upgrade libidl-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner190-translationsUpgrade MozillaFirefox-translationsUpgrade mozilla-nspr-x86Upgrade mozilla-nsprUpgrade libidlUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner191-gnomevfsUpgrade MozillaFirefoxUpgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nspr-32bitUpgrade libfreebl3-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-xulrunner190Upgrade gconf2-x86Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner190-gnomevfsUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner191-32bitUpgrade MozillaFirefox-translations-otherUpgrade libfreebl3-x86Upgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade gconf2Upgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192-x86Upgrade orbit2-32bitUpgrade orbit2-x86Upgrade libidl-x86Upgrade mozilla-nssUpgrade mozilla-xulrunner190-x86Upgrade libfreebl3Upgrade orbit2Upgrade gconf2-32bit | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefox-3.5Upgrade abrowserUpgrade xulrunner-1.9.2Upgrade firefoxUpgrade firefox-3.0 | Nov 8, 2024 | Jan 20, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub