Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web script, as demonstrated by a phishing attack on an HTTPS site.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libproxy-webkitUpgrade thunderbirdUpgrade libproxyUpgrade xulrunnerUpgrade libproxy-gnomeUpgrade libproxy-kdeUpgrade firefoxUpgrade libproxy-binUpgrade libproxy-pythonUpgrade xulrunner-develUpgrade libproxy-mozjsUpgrade devhelpUpgrade yelpUpgrade devhelp-develUpgrade libproxy-devel | Dec 1, 2016 | Feb 19, 2013 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade thunderbirdUpgrade linux-thunderbirdUpgrade linux-firefoxUpgrade seamonkeyUpgrade firefoxUpgrade libxul | Dec 10, 2025 | Feb 19, 2013 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Feb 19, 2013 |
| Mfsa2013 27 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 19.0Upgrade to Mozilla Firefox ESR version 17.0.3 | Feb 21, 2013 | Feb 19, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.16Upgrade to the latest version of Mozilla SeaMonkey | Feb 21, 2013 | Feb 19, 2013 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird ESR version 17.0.3Upgrade to Mozilla Thunderbird version 17.0.3 | Feb 21, 2013 | Feb 19, 2013 |
| Oracle_linux | — | Upgrade thunderbirdUpgrade xulrunner-develUpgrade xulrunnerUpgrade yelpUpgrade libproxy-gnomeUpgrade libproxy-mozjsUpgrade firefoxUpgrade devhelp-develUpgrade libproxy-binUpgrade libproxy-pythonUpgrade libproxy-develUpgrade libproxy-webkitUpgrade libproxyUpgrade libproxy-kdeUpgrade devhelp | Oct 16, 2024 | Feb 19, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 19, 2013 |
| Suse | — | Upgrade xulrunner-debugsourceUpgrade MozillaThunderbird-translations-commonUpgrade beagle-develUpgrade firefox3-python-baseUpgrade mozilla-js-32bitUpgrade seamonkey-dom-inspectorUpgrade seamonkey-translations-otherUpgrade MozillaThunderbird-debugsourceUpgrade MozillaThunderbird-translations-otherUpgrade beagle-firefoxUpgrade MozillaFirefox-develUpgrade beagle-evolutionUpgrade mozilla-jsUpgrade seamonkey-debuginfoUpgrade MozillaFirefox-translations-commonUpgrade xulrunner-debuginfo-x86Upgrade mozilla-js-x86Upgrade MozillaFirefox-translations-otherUpgrade seamonkey-ircUpgrade MozillaFirefox-debugsourceUpgrade mozillafirefox-branding-upstreamUpgrade enigmailUpgrade mozilla-nspr-64bitUpgrade xulrunner-debuginfo-32bitUpgrade xulrunner-devel-debuginfoUpgrade mozilla-nspr-develUpgrade mozillafirefox-buildsymbolsUpgrade MozillaFirefoxUpgrade chmseeUpgrade xulrunner-buildsymbolsUpgrade MozillaThunderbirdUpgrade mozilla-js-debuginfoUpgrade xulrunnerUpgrade mozilla-nss-32bitUpgrade mozilla-nss-64bitUpgrade chmsee-debuginfoUpgrade beagle-guiUpgrade libfreebl3Upgrade seamonkeyUpgrade sle-sdk-releaseUpgrade mozilla-nsprUpgrade xulrunner-x86Upgrade chmsee-debugsourceUpgrade mozilla-js-debuginfo-32bitUpgrade MozillaThunderbird-debuginfoUpgrade mhtml-firefoxUpgrade mozilla-nspr-x86Upgrade MozillaThunderbird-devel-debuginfoUpgrade beagleUpgrade xulrunner-32bitUpgrade seamonkey-venkmanUpgrade libfreebl3-x86Upgrade MozillaThunderbird-develUpgrade beagle-langUpgrade enigmail-debuginfoUpgrade mozilla-nss-develUpgrade xulrunner-develUpgrade MozillaThunderbird-buildsymbolsUpgrade libfreebl3-32bitUpgrade xulrunner-debuginfoUpgrade mozilla-nssUpgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefox-translationsUpgrade mozilla-js-debuginfo-x86Upgrade seamonkey-translations-commonUpgrade mozilla-nss-toolsUpgrade seamonkey-debugsourceUpgrade MozillaFirefox-debuginfoUpgrade mozilla-nss-x86Upgrade mozilla-nspr-32bit | Feb 17, 2015 | Feb 19, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Feb 19, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub