The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle certain redirections involving data: URLs and Java LiveConnect scripts, which allows remote attackers to start processes, read arbitrary local files, and establish network connections via vectors involving a refresh value in the http-equiv attribute of a META element, which causes the wrong security principal to be used.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-dom-inspectorUpgrade seamonkeyUpgrade seamonkey-chatUpgrade firefoxUpgrade seamonkey-js-debuggerUpgrade seamonkey-mailUpgrade seamonkey-devel | Dec 1, 2016 | Dec 10, 2010 |
| Freebsd | — | Upgrade firefoxUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade linux-firefoxUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade linux-firefox-develUpgrade libxul | Dec 10, 2025 | Dec 10, 2010 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade mail-client/mozilla-thunderbird. | Oct 30, 2017 | Dec 10, 2010 |
| Mfsa2010 79 | — | Upgrade to Mozilla Firefox version 3.5.16Upgrade to Mozilla Firefox version 3.6.13 | Jun 14, 2012 | Dec 10, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.11 | Feb 3, 2012 | Dec 10, 2010 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunner-develUpgrade xulrunner | Oct 16, 2024 | Dec 10, 2010 |
| Suse | — | Upgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192-x86Upgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefoxUpgrade mozilla-xulrunner192-gnome | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade firefox-3.5Upgrade firefox-3.0Upgrade abrowserUpgrade firefoxUpgrade xulrunner-1.9.1 | Nov 8, 2024 | Dec 10, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub