The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to read pixel values, and possibly bypass the Same Origin Policy and read text from a different domain, by observing timing differences in execution of filter code.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade xulrunner-develUpgrade xulrunner | Dec 1, 2016 | Jun 25, 2013 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade firefoxUpgrade linux-firefoxUpgrade seamonkeyUpgrade thunderbirdUpgrade linux-thunderbird | Dec 10, 2025 | Jun 26, 2013 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Jun 25, 2013 |
| Mfsa2013 55 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 17.0.7Upgrade to Mozilla Firefox version 22.0 | Jun 26, 2013 | Jun 25, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.19Upgrade to the latest version of Mozilla SeaMonkey | Jul 16, 2013 | Jun 25, 2013 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird ESR version 17.0.7Upgrade to Mozilla Thunderbird version 17.0.7 | Jun 26, 2013 | Jun 25, 2013 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade firefoxUpgrade thunderbird | Oct 16, 2024 | Jun 26, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 25, 2013 |
| Suse | — | Upgrade sle-sdk-releaseUpgrade mozillafirefox-buildsymbolsUpgrade MozillaThunderbird-develUpgrade xulrunner-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-otherUpgrade seamonkey-venkmanUpgrade MozillaThunderbirdUpgrade xulrunnerUpgrade seamonkey-translations-otherUpgrade mozilla-nspr-develUpgrade xulrunner-develUpgrade seamonkeyUpgrade mozilla-js-32bitUpgrade MozillaThunderbird-buildsymbolsUpgrade mozillafirefox-branding-upstreamUpgrade seamonkey-ircUpgrade seamonkey-translations-commonUpgrade enigmailUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nspr-32bitUpgrade mozilla-jsUpgrade xulrunner-buildsymbolsUpgrade MozillaFirefoxUpgrade mozilla-nsprUpgrade seamonkey-dom-inspectorUpgrade MozillaFirefox-translations | Feb 17, 2015 | Jun 25, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Jun 26, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub