The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictions via crafted content.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade gnome-python2-libeggUpgrade firefoxUpgrade xulrunner-develUpgrade devhelp-develUpgrade escUpgrade totem-mozpluginUpgrade yelpUpgrade gnome-python2-gtkmozembedUpgrade gnome-python2-gtkhtml2Upgrade totemUpgrade xulrunnerUpgrade gnome-python2-extrasUpgrade totem-develUpgrade gnome-python2-gtkspellUpgrade devhelp | Dec 1, 2016 | Apr 5, 2010 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade dev-libs/nss. | Oct 30, 2017 | Apr 5, 2010 |
| Mfsa2010 24 | — | Upgrade to Mozilla Firefox version 3.6.2Upgrade to Mozilla Firefox version 3.5.9 | Jun 14, 2012 | Apr 5, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.4 | Feb 3, 2012 | Apr 5, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.4 | Feb 22, 2012 | Apr 5, 2010 |
| Oracle_linux | — | Upgrade gnome-python2-gtkmozembedUpgrade xulrunnerUpgrade devhelp-develUpgrade escUpgrade xulrunner-develUpgrade totem-develUpgrade gnome-python2-libeggUpgrade yelpUpgrade firefoxUpgrade gnome-python2-extrasUpgrade totemUpgrade devhelpUpgrade gnome-python2-gtkspellUpgrade totem-mozpluginUpgrade gnome-python2-gtkhtml2 | Oct 16, 2024 | Apr 5, 2010 |
| Suse | — | Upgrade mozilla-xulrunner192Upgrade mozilla-nsprUpgrade mozilla-xulrunner192-x86Upgrade orbit2-x86Upgrade mozilla-nssUpgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner190-x86Upgrade libfreebl3Upgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbird-develUpgrade orbit2-32bitUpgrade gconf2-32bitUpgrade mozilla-nspr-32bitUpgrade libidl-32bitUpgrade mozilla-xulrunner190-translationsUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-develUpgrade mozilla-nss-32bitUpgrade libfreebl3-x86Upgrade libidl-x86Upgrade MozillaFirefox-translations-otherUpgrade gconf2-x86Upgrade libidlUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-translationsUpgrade MozillaThunderbirdUpgrade gconf2Upgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-nss-x86Upgrade MozillaThunderbird-translations-commonUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-nspr-x86Upgrade MozillaFirefoxUpgrade libfreebl3-32bitUpgrade mozilla-xulrunner190Upgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-toolsUpgrade orbit2Upgrade mozilla-xulrunner192-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.1Upgrade firefox-3.5 | Nov 8, 2024 | Apr 5, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub