The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to direct proxies.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-develUpgrade thunderbirdUpgrade xulrunnerUpgrade firefox | Dec 1, 2016 | Oct 30, 2013 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade firefoxUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade thunderbirdUpgrade linux-firefox | Dec 10, 2025 | Oct 30, 2013 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade dev-libs/nspr.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Oct 30, 2013 |
| Mfsa2013 101 | — | Upgrade to Mozilla Firefox ESR version 17.0.10Upgrade to Mozilla Firefox ESR version 24.1Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 25.0 | Nov 14, 2013 | Oct 30, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.22Upgrade to the latest version of Mozilla SeaMonkey | Dec 8, 2014 | Oct 30, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird ESR version 17.0.10Upgrade to Mozilla Thunderbird version 24.1Upgrade to the latest version of Mozilla Thunderbird | Nov 14, 2013 | Oct 30, 2013 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade firefoxUpgrade thunderbirdUpgrade xulrunner-devel | Oct 16, 2024 | Oct 30, 2013 |
| Suse | — | Upgrade mozilla-nspr-32bitUpgrade seamonkeyUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefox-translationsUpgrade seamonkey-dom-inspectorUpgrade firefox-pangoUpgrade MozillaThunderbird-buildsymbolsUpgrade mozilla-nss-toolsUpgrade firefox-fontconfig-32bitUpgrade firefox-freetype2-32bitUpgrade MozillaThunderbird-develUpgrade mozilla-js-32bitUpgrade firefox-atk-32bitUpgrade firefox-pixmanUpgrade enigmailUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade seamonkey-venkmanUpgrade xulrunner-32bitUpgrade seamonkey-translations-commonUpgrade firefox-freetype2Upgrade mozilla-xulrunner191-translations-32bitUpgrade xulrunner-develUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner191Upgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-develUpgrade firefox-gtk2Upgrade firefox-libstdc++6-32bitUpgrade seamonkey-ircUpgrade MozillaFirefoxUpgrade xulrunnerUpgrade firefox-cairo-32bitUpgrade seamonkey-translations-otherUpgrade firefox-gtk2-32bitUpgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade firefox-pcre-32bitUpgrade mozilla-xulrunner191-32bitUpgrade firefox-fontconfigUpgrade firefox-libgcc_s1-32bitUpgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaThunderbird-translations-commonUpgrade firefox-atkUpgrade mozillafirefox-branding-upstreamUpgrade MozillaThunderbird-translations-otherUpgrade firefox-pixman-32bitUpgrade mozilla-nssUpgrade firefox-gtk2-langUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-glib2Upgrade mozillafirefox-buildsymbolsUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner192Upgrade MozillaThunderbirdUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-translationsUpgrade firefox-pango-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nspr-develUpgrade firefox-libgcc_s1Upgrade xulrunner-buildsymbolsUpgrade firefox-pcreUpgrade firefox-cairoUpgrade mozilla-jsUpgrade firefox-glib2-32bitUpgrade mozilla-nsprUpgrade firefox-libstdc++6Upgrade MozillaFirefox-translations-common | Feb 17, 2015 | Oct 30, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Oct 30, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub