The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers to execute arbitrary code by leveraging a Same Origin Policy bypass.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefox | Dec 1, 2016 | Jul 5, 2015 |
| Freebsd | — | Upgrade firefoxUpgrade linux-thunderbirdUpgrade linux-firefoxUpgrade libxulUpgrade firefox-esrUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade thunderbird | Dec 10, 2025 | Jul 16, 2015 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox. | Oct 30, 2017 | Jul 5, 2015 |
| Mfsa2015 69 | — | Upgrade to Mozilla Firefox ESR version 38.1Upgrade to Mozilla Firefox ESR version 31.8Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 39.0 | Jul 8, 2015 | Jul 5, 2015 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.3.0.0.28.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Jul 5, 2015 |
| Oracle_linux | — | Upgrade firefox | Oct 16, 2024 | Jul 6, 2015 |
| Suse | — | Upgrade libfreebl3-32bitUpgrade libfreebl3-hmacUpgrade mozilla-nss-certs-32bitUpgrade MozillaFirefox-debuginfoUpgrade mozilla-nss-32bitUpgrade mozilla-nss-certs-debuginfoUpgrade mozillafirefox-branding-upstreamUpgrade libsoftokn3Upgrade mozilla-nspr-debugsourceUpgrade libsoftokn3-hmacUpgrade mozilla-nssUpgrade MozillaFirefox-translations-otherUpgrade libfreebl3-x86Upgrade MozillaThunderbird-develUpgrade mozilla-nss-debuginfo-32bitUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-nss-certs-debuginfo-32bitUpgrade MozillaFirefox-debugsourceUpgrade libfreebl3-hmac-32bitUpgrade mozilla-nss-certsUpgrade mozilla-nss-sysinit-debuginfoUpgrade libfreebl3-debuginfoUpgrade mozilla-nss-certs-debuginfo-x86Upgrade MozillaThunderbird-translations-commonUpgrade mozilla-nss-toolsUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade mozilla-nss-certs-x86Upgrade MozillaThunderbird-buildsymbolsUpgrade MozillaThunderbird-debuginfoUpgrade firefox-gcc47Upgrade firefox-libgcc_s1Upgrade mozilla-nspr-x86Upgrade libfreebl3-debuginfo-x86Upgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefox-translations-commonUpgrade libfreebl3Upgrade mozilla-nspr-debuginfo-32bitUpgrade MozillaFirefox-develUpgrade libsoftokn3-x86Upgrade libsoftokn3-debuginfo-x86Upgrade MozillaFirefoxUpgrade libfreebl3-debuginfo-32bitUpgrade libsoftokn3-32bitUpgrade mozilla-nspr-32bitUpgrade mozilla-nsprUpgrade mozilla-nspr-develUpgrade mozilla-nss-develUpgrade libsoftokn3-debuginfoUpgrade MozillaThunderbird-debugsourceUpgrade mozilla-nss-sysinit-debuginfo-x86Upgrade mozilla-nss-debuginfoUpgrade mozilla-nss-sysinitUpgrade mozilla-nss-debuginfo-x86Upgrade MozillaFirefox-translationsUpgrade mozilla-nss-sysinit-32bitUpgrade MozillaThunderbirdUpgrade mozilla-nspr-debuginfo-x86Upgrade libsoftokn3-debuginfo-32bitUpgrade mozilla-nss-x86Upgrade mozilla-nss-sysinit-x86Upgrade mozillafirefox-buildsymbolsUpgrade mozilla-nss-tools-debuginfoUpgrade firefox-libstdc++6Upgrade mozilla-nspr-debuginfoUpgrade libsoftokn3-hmac-32bitUpgrade mozilla-nss-debugsource | May 18, 2016 | Jul 5, 2015 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Jul 6, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub