The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 3.0.6 and SeaMonkey do not block links to the (1) about:plugins and (2) about:config URIs from .desktop files, which allows user-assisted remote attackers to bypass the Same Origin Policy and execute arbitrary code with chrome privileges via vectors involving the URL field in a Desktop Entry section of a .desktop file, related to representation of about: URIs as jar:file:// URIs. NOTE: this issue exists because of an incomplete fix for CVE-2008-4582.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nss-develUpgrade nss-toolsUpgrade nssUpgrade firefox | Dec 1, 2016 | Feb 4, 2009 |
| Freebsd | — | Upgrade thunderbirdUpgrade linux-firefoxUpgrade firefoxUpgrade linux-seamonkey-develUpgrade seamonkeyUpgrade linux-thunderbirdUpgrade linux-firefox-develUpgrade linux-seamonkey | Dec 10, 2025 | Feb 11, 2009 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox.Upgrade www-client/icecat.Upgrade www-client/seamonkey.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird-bin. | Oct 30, 2017 | Feb 4, 2009 |
| Mfsa2009 04 | — | Upgrade to Mozilla Firefox version 3.0.6 | Jun 14, 2012 | Feb 4, 2009 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade nss-toolsUpgrade nss-develUpgrade nssUpgrade nss-pkcs11-develUpgrade xulrunnerUpgrade xulrunner-devel-unstable | Oct 16, 2024 | Feb 4, 2009 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner190Upgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner190-x86Upgrade MozillaFirefoxUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-32bitUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-devel | Feb 17, 2015 | Jun 28, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub