The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Content Security Policy (CSP) implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not block inline event handlers, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade xulrunnerUpgrade xulrunner-devel | Dec 1, 2016 | Jun 5, 2012 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-thunderbirdUpgrade firefoxUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade seamonkeyUpgrade libxul | Dec 10, 2025 | Jun 5, 2012 |
| Mfsa2012 36 | — | Upgrade to Mozilla Firefox ESR version 10.0.5Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 13.0 | Jun 14, 2012 | Jun 5, 2012 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.10Upgrade to the latest version of Mozilla SeaMonkey | Jun 19, 2012 | Jun 5, 2012 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 13.0Upgrade to Mozilla Thunderbird ESR version 10.0.5 | Jun 19, 2012 | Jun 5, 2012 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade firefoxUpgrade xulrunner-develUpgrade thunderbird | Oct 16, 2024 | Jun 5, 2012 |
| Suse | — | Upgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefoxUpgrade MozillaThunderbird-develUpgrade MozillaThunderbirdUpgrade MozillaFirefox-translationsUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Jun 5, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub