The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other methods in a parent frame, even when the parent is in a different domain, which violates the same origin policy and allows remote attackers to steal sensitive information such as cookies and passwords from web sites whose child frames do not verify that they are in the same domain as their parents.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade firefoxUpgrade ja-mozillafirebird-gtk2Upgrade mozilla-thunderbirdUpgrade fr-linux-netscapeUpgrade zhCN-linux-mozillafirebirdUpgrade fr-netscape7Upgrade mozilla-gtkUpgrade mozilla-embeddedUpgrade phoenixUpgrade mozilla-firebirdUpgrade mozillaUpgrade de-linux-mozillafirebirdUpgrade ja-linux-netscapeUpgrade mozilla-gtk1Upgrade pt_BR-netscape7Upgrade mozilla-gtk2Upgrade ja-netscape7Upgrade linux-phoenixUpgrade linux-firefoxUpgrade netscape7Upgrade de-netscape7Upgrade linux-netscapeUpgrade ru-linux-mozillafirebirdUpgrade linux-mozillaUpgrade zhTW-linux-mozillafirebirdUpgrade linux-mozilla-develUpgrade ja-linux-mozillafirebird-gtk1Upgrade mozilla+ipv6Upgrade linux-mozillafirebirdUpgrade de-linux-netscapeUpgrade el-linux-mozillafirebird | Dec 10, 2025 | Jul 16, 2005 |
| Ubuntu | — | Upgrade mozilla-firefoxUpgrade mozilla-browserUpgrade mozilla-firefox-locale-jaUpgrade mozilla-firefox-locale-ukUpgrade mozilla-firefox-locale-trUpgrade mozilla-firefox-locale-nb | Nov 8, 2024 | Jul 13, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub