The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The cert_TestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, only checks the hostname portion of a certificate when the hostname portion of the URI is not a fully qualified domain name (FQDN), which allows remote attackers to spoof trusted certificates.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mozilla+ipv6Upgrade ja-linux-mozillafirebird-gtk1Upgrade linux-netscapeUpgrade linux-mozilla-develUpgrade fr-netscape7Upgrade linux-mozillafirebirdUpgrade fr-linux-netscapeUpgrade ja-netscape7Upgrade ja-linux-netscapeUpgrade phoenixUpgrade ru-linux-mozillafirebirdUpgrade el-linux-mozillafirebirdUpgrade mozillaUpgrade mozilla-gtk1Upgrade thunderbirdUpgrade ja-mozillafirebird-gtk2Upgrade mozilla-thunderbirdUpgrade mozilla-gtk2Upgrade linux-phoenixUpgrade de-linux-netscapeUpgrade mozilla-firebirdUpgrade zhCN-linux-mozillafirebirdUpgrade firefoxUpgrade zhTW-linux-mozillafirebirdUpgrade pt_BR-netscape7Upgrade mozilla-gtkUpgrade mozilla-embeddedUpgrade de-netscape7Upgrade de-linux-mozillafirebirdUpgrade netscape7Upgrade linux-mozilla | Dec 10, 2025 | Sep 30, 2004 |
| Suse | — | Upgrade mozillaUpgrade mozilla-calendarUpgrade mozilla-mailUpgrade mozilla-venkmanUpgrade mozilla-dom-inspectorUpgrade mozilla-irc | Feb 17, 2015 | Aug 18, 2004 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub