The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior, a related issue to CVE-2011-3004.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade firefox | Dec 1, 2016 | Nov 9, 2011 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade linux-firefoxUpgrade thunderbirdUpgrade libxulUpgrade firefox | Dec 10, 2025 | Nov 8, 2011 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner-bin. | Oct 30, 2017 | Nov 9, 2011 |
| Mfsa2011 46 | — | Upgrade to Mozilla Firefox version 3.6.24 | Jun 14, 2012 | Nov 9, 2011 |
| Oracle_linux | — | Upgrade thunderbird | Oct 16, 2024 | Nov 9, 2011 |
| Suse | — | Upgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Nov 9, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub