The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of the new page and results in a same origin violation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade fr-netscape7Upgrade zhCN-linux-mozillafirebirdUpgrade linux-firefoxUpgrade de-netscape7Upgrade ja-linux-netscapeUpgrade de-linux-netscapeUpgrade fr-linux-netscapeUpgrade zhTW-linux-mozillafirebirdUpgrade mozilla-gtkUpgrade mozilla+ipv6Upgrade phoenixUpgrade linux-mozilla-develUpgrade ja-netscape7Upgrade linux-netscapeUpgrade ja-mozillafirebird-gtk2Upgrade linux-mozillaUpgrade linux-mozillafirebirdUpgrade el-linux-mozillafirebirdUpgrade mozilla-firebirdUpgrade linux-phoenixUpgrade ru-linux-mozillafirebirdUpgrade mozilla-gtk1Upgrade mozilla-thunderbirdUpgrade pt_BR-netscape7Upgrade netscape7Upgrade mozilla-gtk2Upgrade de-linux-mozillafirebirdUpgrade mozilla-embeddedUpgrade mozillaUpgrade firefoxUpgrade ja-linux-mozillafirebird-gtk1 | Dec 10, 2025 | Jul 16, 2005 |
| Ubuntu | — | Upgrade mozilla-browserUpgrade mozilla-firefox-locale-trUpgrade mozilla-firefox-locale-jaUpgrade mozilla-firefox-locale-ukUpgrade mozilla-firefoxUpgrade mozilla-firefox-locale-nb | Nov 8, 2024 | Jul 13, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub