The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade thunderbirdUpgrade xulrunnerUpgrade xulrunner-devel-unstable | Dec 1, 2016 | Apr 22, 2009 |
| Freebsd | — | Upgrade linux-firefox-develUpgrade linux-seamonkey-develUpgrade firefoxUpgrade seamonkeyUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade linux-thunderbird | Dec 10, 2025 | Apr 22, 2009 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade dev-libs/nss.Upgrade www-client/icecat.Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Apr 22, 2009 |
| Mfsa2009 19 | — | Upgrade to Mozilla Firefox version 3.0.9 | Jun 14, 2012 | Apr 22, 2009 |
| Oracle_linux | — | Upgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade xulrunnerUpgrade firefox | Oct 16, 2024 | Apr 22, 2009 |
| Suse | — | Upgrade MozillaFirefoxUpgrade libfreebl3Upgrade libfreebl3-32bitUpgrade gconf2-x86Upgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-nspr-x86Upgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192Upgrade mozilla-nsprUpgrade libidlUpgrade mozilla-xulrunner190-gnomevfsUpgrade orbit2-32bitUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner191-x86Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner190Upgrade mozilla-nss-x86Upgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner191-translationsUpgrade libidl-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner191Upgrade orbit2-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner191-32bitUpgrade libidl-x86Upgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-develUpgrade gconf2Upgrade mozilla-nss-toolsUpgrade mozilla-nssUpgrade mozilla-xulrunner192-x86Upgrade orbit2Upgrade gconf2-32bitUpgrade MozillaFirefox-translations-commonUpgrade libfreebl3-x86Upgrade mozilla-xulrunner191-gnomevfs | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade xulrunner-1.9Upgrade thunderbirdUpgrade abrowser | Nov 8, 2024 | Apr 22, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub