The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Firefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary code by using standalone applications such as Flash and QuickTime to open a javascript: URL, which is run in the context of the previous page, and may lead to code execution if the standalone application loads a privileged chrome: URL.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade el-linux-mozillafirebirdUpgrade phoenixUpgrade linux-mozilla-develUpgrade zhCN-linux-mozillafirebirdUpgrade ja-netscape7Upgrade fr-linux-netscapeUpgrade firefoxUpgrade ru-linux-mozillafirebirdUpgrade linux-mozillaUpgrade linux-mozillafirebirdUpgrade ja-linux-netscapeUpgrade linux-netscapeUpgrade de-linux-mozillafirebirdUpgrade mozillaUpgrade netscape7Upgrade mozilla+ipv6Upgrade linux-phoenixUpgrade linux-firefoxUpgrade mozilla-firebirdUpgrade mozilla-gtk1Upgrade mozilla-embeddedUpgrade de-linux-netscapeUpgrade mozilla-gtkUpgrade mozilla-gtk2Upgrade mozilla-thunderbirdUpgrade de-netscape7Upgrade ja-mozillafirebird-gtk2Upgrade zhTW-linux-mozillafirebirdUpgrade pt_BR-netscape7Upgrade fr-netscape7Upgrade ja-linux-mozillafirebird-gtk1 | Dec 10, 2025 | Jul 16, 2005 |
| Ubuntu | — | Upgrade mozilla-firefox-locale-nbUpgrade mozilla-firefoxUpgrade mozilla-firefox-locale-ukUpgrade mozilla-firefox-locale-trUpgrade mozilla-firefox-locale-ja | Nov 8, 2024 | Jul 13, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub