The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade xulrunner-develUpgrade firefoxUpgrade xulrunner-devel-unstableUpgrade xulrunner | Dec 1, 2016 | Apr 22, 2009 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade linux-seamonkey-develUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade firefoxUpgrade linux-firefox-devel | Dec 10, 2025 | Apr 22, 2009 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/icecat.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox. | Oct 30, 2017 | Apr 22, 2009 |
| Mfsa2009 18 | — | Upgrade to Mozilla Firefox version 3.0.9 | Jun 14, 2012 | Apr 22, 2009 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade xulrunner-devel-unstableUpgrade firefox | Oct 16, 2024 | Apr 22, 2009 |
| Suse | — | Upgrade orbit2-x86Upgrade mozilla-xulrunner191-gnomevfsUpgrade MozillaFirefox-develUpgrade libfreebl3-x86Upgrade mozilla-nss-toolsUpgrade orbit2-32bitUpgrade mozilla-xulrunner191-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade gconf2Upgrade mozilla-xulrunner191Upgrade mozilla-xulrunner190-translationsUpgrade libidl-x86Upgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-nssUpgrade gconf2-32bitUpgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade orbit2Upgrade mozilla-xulrunner190-x86Upgrade mozilla-nsprUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192Upgrade mozilla-nss-x86Upgrade mozilla-nss-32bitUpgrade libidl-32bitUpgrade libfreebl3Upgrade mozilla-nspr-x86Upgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefox-translationsUpgrade libfreebl3-32bitUpgrade mozilla-xulrunner192-32bitUpgrade gconf2-x86Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner190Upgrade libidlUpgrade MozillaFirefoxUpgrade mozilla-xulrunner191-x86Upgrade mozilla-nspr-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade thunderbirdUpgrade firefox-3.0Upgrade abrowser | Nov 8, 2024 | Apr 22, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub