Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade netscape7Upgrade mozilla-thunderbirdUpgrade linux-firefoxUpgrade ja-linux-mozillafirebird-gtk1Upgrade fr-netscape7Upgrade phoenixUpgrade linux-mozillafirebirdUpgrade mozilla-gtk1Upgrade mozilla-firebirdUpgrade ja-mozillafirebird-gtk2Upgrade mozilla-embeddedUpgrade mozilla-gtkUpgrade mozilla+ipv6Upgrade fr-linux-netscapeUpgrade pt_BR-netscape7Upgrade zhTW-linux-mozillafirebirdUpgrade de-netscape7Upgrade de-linux-netscapeUpgrade mozilla-gtk2Upgrade linux-phoenixUpgrade el-linux-mozillafirebirdUpgrade ja-netscape7Upgrade linux-mozilla-develUpgrade firefoxUpgrade mozillaUpgrade ru-linux-mozillafirebirdUpgrade zhCN-linux-mozillafirebirdUpgrade de-linux-mozillafirebirdUpgrade linux-netscapeUpgrade linux-mozillaUpgrade ja-linux-netscape | Dec 10, 2025 | Jul 16, 2005 |
| Ubuntu | — | Upgrade mozilla-browserUpgrade mozilla-firefox-locale-trUpgrade mozilla-firefox-locale-jaUpgrade mozilla-thunderbirdUpgrade mozilla-firefoxUpgrade mozilla-firefox-locale-ukUpgrade mozilla-firefox-locale-nb | Nov 8, 2024 | Jul 13, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub