The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade fr-netscape7Upgrade el-linux-mozillafirebirdUpgrade linux-mozillafirebirdUpgrade linux-netscapeUpgrade fr-linux-netscapeUpgrade phoenixUpgrade mozilla-firebirdUpgrade ja-linux-mozillafirebird-gtk1Upgrade ja-mozillafirebird-gtk2Upgrade mozilla-gtkUpgrade mozilla+ipv6Upgrade de-netscape7Upgrade ja-linux-netscapeUpgrade de-linux-mozillafirebirdUpgrade mozilla-embeddedUpgrade mozillaUpgrade pt_BR-netscape7Upgrade mozilla-thunderbirdUpgrade ru-linux-mozillafirebirdUpgrade ja-netscape7Upgrade mozilla-gtk1Upgrade linux-mozillaUpgrade linux-phoenixUpgrade zhTW-linux-mozillafirebirdUpgrade firefoxUpgrade de-linux-netscapeUpgrade thunderbirdUpgrade mozilla-gtk2Upgrade zhCN-linux-mozillafirebirdUpgrade netscape7Upgrade linux-mozilla-devel | Dec 10, 2025 | Sep 30, 2004 |
| Suse | — | Upgrade mozilla-venkmanUpgrade mozilla-ircUpgrade mozilla-mailUpgrade mozilla-calendarUpgrade mozilla-dom-inspectorUpgrade mozilla | Feb 17, 2015 | Aug 18, 2004 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub