The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to spoof an SSL indicator for an http URL or a file URL by setting document.location to an https URL corresponding to a site that responds with a No Content (aka 204) status code and an empty body.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-dom-inspectorUpgrade seamonkey-mailUpgrade firefoxUpgrade seamonkey-chatUpgrade xulrunner-develUpgrade xulrunner-devel-unstableUpgrade seamonkey-js-debuggerUpgrade seamonkey-develUpgrade xulrunnerUpgrade seamonkey | Dec 1, 2016 | Dec 17, 2009 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade linux-firefoxUpgrade seamonkeyUpgrade firefoxUpgrade thunderbird | Dec 10, 2025 | Dec 16, 2009 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade www-client/icecat.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nss.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Dec 17, 2009 |
| Mfsa2009 69 | — | Upgrade to Mozilla Firefox version 3.5.6Upgrade to Mozilla Firefox version 3.0.16 | Jun 14, 2012 | Dec 17, 2009 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.1 | Feb 3, 2012 | Dec 17, 2009 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade xulrunner | Oct 16, 2024 | Dec 17, 2009 |
| Suse | — | Upgrade mozilla-xulrunner190-x86Upgrade libfreebl3-x86Upgrade orbit2-x86Upgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade libfreebl3Upgrade MozillaFirefox-branding-SLEDUpgrade libfreebl3-32bitUpgrade gconf2-x86Upgrade mozilla-xulrunner190-translationsUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-x86Upgrade gconf2Upgrade mozilla-nssUpgrade orbit2-32bitUpgrade libidl-x86Upgrade gconf2-32bitUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-nsprUpgrade mozilla-xulrunner190Upgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner191-x86Upgrade mozilla-nss-toolsUpgrade mozilla-nspr-32bitUpgrade orbit2Upgrade MozillaFirefox-develUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner192-gnomeUpgrade libidl-32bitUpgrade mozilla-xulrunner191Upgrade libidlUpgrade mozilla-xulrunner190-32bitUpgrade MozillaFirefoxUpgrade mozilla-nspr-x86Upgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefox-translations | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade xulrunner-1.9Upgrade firefox-3.5Upgrade xulrunner-1.9.1Upgrade abrowser | Nov 8, 2024 | Dec 17, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub