The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an embedded SVG document.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-develUpgrade xulrunnerUpgrade firefoxUpgrade xulrunner-devel-unstable | Dec 1, 2016 | Feb 22, 2010 |
| Freebsd | — | Upgrade firefoxUpgrade linux-firefox-develUpgrade thunderbirdUpgrade linux-firefoxUpgrade seamonkey | Dec 10, 2025 | Feb 18, 2010 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird.Upgrade dev-libs/nss.Upgrade www-client/icecat. | Oct 30, 2017 | Feb 22, 2010 |
| Mfsa2010 05 | — | Upgrade to Mozilla Firefox version 3.6Upgrade to Mozilla Firefox version 3.0.18Upgrade to Mozilla Firefox version 3.5.8 | Jun 14, 2012 | Feb 22, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.3 | Feb 3, 2012 | Feb 22, 2010 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade xulrunnerUpgrade xulrunner-devel-unstableUpgrade firefox | Oct 16, 2024 | Feb 21, 2010 |
| Suse | — | Upgrade libidl-32bitUpgrade orbit2-32bitUpgrade mozilla-xulrunner192Upgrade libidl-x86Upgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner191-x86Upgrade libfreebl3-x86Upgrade mozilla-nsprUpgrade MozillaFirefox-branding-SLEDUpgrade libfreebl3Upgrade gconf2-32bitUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner191-32bitUpgrade orbit2-x86Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nssUpgrade MozillaFirefox-develUpgrade libfreebl3-32bitUpgrade mozilla-nss-x86Upgrade mozilla-xulrunner190-x86Upgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner191-gnomevfsUpgrade gconf2Upgrade libidlUpgrade mozilla-nss-32bitUpgrade mozilla-nspr-x86Upgrade gconf2-x86Upgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner192-translationsUpgrade orbit2Upgrade mozilla-xulrunner190Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefoxUpgrade mozilla-xulrunner191 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.1Upgrade firefox-3.0Upgrade xulrunner-1.9Upgrade firefox-3.5Upgrade abrowser | Nov 8, 2024 | Feb 22, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub