The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid JavaScript code, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted HTML document.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade xulrunnerUpgrade xulrunner-devel | Dec 1, 2016 | Jul 30, 2010 |
| Freebsd | — | Upgrade firefoxUpgrade linux-firefoxUpgrade linux-firefox-develUpgrade seamonkeyUpgrade thunderbird | Dec 10, 2025 | Jul 21, 2010 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird.Upgrade www-client/icecat.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey-bin.Upgrade dev-libs/nss.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Jul 30, 2010 |
| Mfsa2010 42 | — | Upgrade to Mozilla Firefox version 3.6.7Upgrade to Mozilla Firefox version 3.5.11 | Jun 14, 2012 | Jul 30, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.6 | Feb 3, 2012 | Jul 30, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.6Upgrade to Mozilla Thunderbird version 3.1.1 | Feb 22, 2012 | Jul 30, 2010 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Jul 30, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 20, 2010 |
| Suse | — | Upgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-nsprUpgrade mozilla-nss-x86Upgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192Upgrade mozilla-nspr-x86Upgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner190Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner191-32bitUpgrade libidl-32bitUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner190-translationsUpgrade libidlUpgrade mozilla-xulrunner192-translationsUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner191-x86Upgrade MozillaFirefoxUpgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nssUpgrade libfreebl3-x86Upgrade mozilla-xulrunner190-x86Upgrade libidl-x86Upgrade MozillaThunderbird-develUpgrade MozillaFirefox-develUpgrade orbit2-x86Upgrade mozilla-xulrunner192-x86Upgrade gconf2-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner190-gnomevfsUpgrade MozillaThunderbird-translations-otherUpgrade orbit2-32bitUpgrade orbit2Upgrade libfreebl3Upgrade mozilla-xulrunner191-translationsUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner191Upgrade MozillaFirefox-translations-otherUpgrade gconf2-x86Upgrade gconf2Upgrade mozilla-nss-32bitUpgrade mozilla-nss-tools | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade abrowserUpgrade thunderbirdUpgrade firefox-3.0Upgrade xulrunner-1.9.2Upgrade firefox-3.5 | Nov 8, 2024 | Jul 30, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub