The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefox | Dec 1, 2016 | Apr 5, 2010 |
| Freebsd | — | Upgrade seamonkeyUpgrade nssUpgrade linux-firefox-develUpgrade linux-firefoxUpgrade thunderbirdUpgrade linux-f10-nssUpgrade firefox | Dec 10, 2025 | Mar 30, 2010 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox-bin.Upgrade dev-libs/nss.Upgrade www-client/icecat.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Apr 5, 2010 |
| Mfsa2010 21 | — | Upgrade to Mozilla Firefox version 3.0.19Upgrade to Mozilla Firefox version 3.5.8 | Jun 14, 2012 | Apr 5, 2010 |
| Mfsa2010 82 | — | Upgrade to Mozilla Firefox version 3.5.16Upgrade to Mozilla Firefox version 3.6.13 | Jun 14, 2012 | Apr 5, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.3 | Feb 3, 2012 | Apr 5, 2010 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunnerUpgrade xulrunner-devel-unstableUpgrade xulrunner-devel | Oct 16, 2024 | Apr 5, 2010 |
| Suse | — | Upgrade mozilla-xulrunner190-x86Upgrade libidl-32bitUpgrade gconf2-32bitUpgrade orbit2-x86Upgrade gconf2-x86Upgrade mozilla-xulrunner192-develUpgrade libfreebl3Upgrade mozilla-nssUpgrade mozilla-xulrunner191-x86Upgrade mozilla-nsprUpgrade libfreebl3-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner190Upgrade mozilla-nspr-x86Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-nss-32bitUpgrade mozilla-nss-x86Upgrade mozilla-xulrunner191-translationsUpgrade orbit2Upgrade libidlUpgrade mozilla-nss-toolsUpgrade orbit2-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner190-32bitUpgrade libidl-x86Upgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade MozillaFirefoxUpgrade gconf2Upgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner192-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade xulrunner-1.9.1Upgrade firefox-3.0Upgrade abrowserUpgrade firefox-3.5 | Nov 8, 2024 | Apr 5, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub