The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Style Inspector in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 does not properly restrict the context of HTML markup and Cascading Style Sheets (CSS) token sequences, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted stylesheet.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade xulrunner-develUpgrade xulrunner | Dec 1, 2016 | Nov 21, 2012 |
| Freebsd | — | Upgrade linux-firefoxUpgrade seamonkeyUpgrade libxulUpgrade thunderbirdUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade firefox | Dec 10, 2025 | Nov 20, 2012 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird.Upgrade dev-libs/nss.Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin. | Oct 30, 2017 | Nov 21, 2012 |
| Mfsa2012 104 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 10.0.11Upgrade to Mozilla Firefox version 17.0 | Nov 14, 2013 | Nov 21, 2012 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Nov 21, 2012 |
| Suse | — | Upgrade mozilla-nssUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefoxUpgrade mozilla-nss-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-nss-develUpgrade mozilla-nss-toolsUpgrade mozilla-nss-x86Upgrade libfreebl3-32bitUpgrade libfreebl3Upgrade libfreebl3-x86 | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Nov 21, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub