Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 allows remote attackers to inject arbitrary web script or HTML via crafted text with Shift JIS encoding.
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade seamonkey-mailUpgrade seamonkey-chatUpgrade seamonkey-develUpgrade seamonkey-js-debuggerUpgrade seamonkeyUpgrade firefoxUpgrade seamonkey-dom-inspectorUpgrade xulrunner-develUpgrade thunderbird | Dec 1, 2016 | Nov 9, 2011 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-thunderbirdUpgrade firefoxUpgrade thunderbirdUpgrade libxul | Dec 10, 2025 | Nov 8, 2011 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey.Upgrade dev-libs/nss.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/icecat. | Oct 30, 2017 | Nov 9, 2011 |
| Mfsa2011 47 | — | Upgrade to Mozilla Firefox version 8.0Upgrade to Mozilla Firefox version 3.6.24 | Jun 14, 2012 | Nov 9, 2011 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.5.0 | Feb 3, 2012 | Nov 9, 2011 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.16Upgrade to Mozilla Thunderbird version 8.0 | Feb 22, 2012 | Nov 9, 2011 |
| Oracle Solaris | — | Upgrade web/data/firefox-bookmarks to version 8.0-0.175.0.3.0.4.0 on Solaris 11.0Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 8.0-0.175.0.4.0.3.0 on Solaris 11.0Upgrade mail/thunderbird to version 8.0-0.175.0.4.0.3.0 on Solaris 11.0Upgrade web/browser/firefox to version 8.0-0.175.0.3.0.4.0 on Solaris 11.0Upgrade web/browser/firefox/multi-user-desktop to version 8.0-0.175.0.3.0.4.0 on Solaris 11.0 | May 29, 2017 | Nov 9, 2011 |
| Oracle_linux | — | Upgrade thunderbird | Oct 16, 2024 | Nov 9, 2011 |
| Suse | — | Upgrade MozillaThunderbirdUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192Upgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192-x86Upgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbirdUpgrade xulrunner-1.9.2 | Nov 8, 2024 | Nov 9, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub