The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade xulrunner-develUpgrade firefox | Dec 1, 2016 | Feb 22, 2010 |
| Freebsd | — | Upgrade thunderbirdUpgrade firefoxUpgrade linux-firefoxUpgrade seamonkeyUpgrade linux-firefox-devel | Dec 10, 2025 | Feb 18, 2010 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/icecat.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox. | Oct 30, 2017 | Feb 22, 2010 |
| Mfsa2010 04 | — | Upgrade to Mozilla Firefox version 3.5.8Upgrade to Mozilla Firefox version 3.0.18Upgrade to Mozilla Firefox version 3.6 | Jun 14, 2012 | Feb 22, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.3 | Feb 3, 2012 | Feb 22, 2010 |
| Oracle_linux | — | Upgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade xulrunnerUpgrade firefox | Oct 16, 2024 | Feb 21, 2010 |
| Suse | — | Upgrade mozilla-xulrunner190-gnomevfsUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translationsUpgrade mozilla-nsprUpgrade libidl-32bitUpgrade mozilla-nspr-32bitUpgrade libidl-x86Upgrade mozilla-nssUpgrade orbit2-x86Upgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-gnomeUpgrade gconf2-32bitUpgrade libfreebl3Upgrade orbit2-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade libfreebl3-x86Upgrade mozilla-xulrunner192Upgrade gconf2-x86Upgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner191-x86Upgrade mozilla-nspr-x86Upgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-32bitUpgrade orbit2Upgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade libidlUpgrade mozilla-nss-x86Upgrade MozillaFirefoxUpgrade mozilla-xulrunner191Upgrade libfreebl3-32bitUpgrade gconf2Upgrade mozilla-nss-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade firefox-3.5Upgrade abrowserUpgrade xulrunner-1.9Upgrade xulrunner-1.9.1 | Nov 8, 2024 | Feb 22, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub