The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade zhCN-linux-mozillafirebirdUpgrade linux-netscapeUpgrade linux-mozilla-develUpgrade firefoxUpgrade ja-netscape7Upgrade linux-mozillaUpgrade de-linux-netscapeUpgrade zhTW-linux-mozillafirebirdUpgrade mozilla+ipv6Upgrade netscape7Upgrade linux-phoenixUpgrade mozilla-gtk1Upgrade ru-linux-mozillafirebirdUpgrade ja-mozillafirebird-gtk2Upgrade mozilla-gtkUpgrade fr-netscape7Upgrade phoenixUpgrade mozillaUpgrade linux-firefoxUpgrade mozilla-thunderbirdUpgrade ja-linux-mozillafirebird-gtk1Upgrade el-linux-mozillafirebirdUpgrade mozilla-embeddedUpgrade mozilla-firebirdUpgrade fr-linux-netscapeUpgrade linux-mozillafirebirdUpgrade mozilla-gtk2Upgrade ja-linux-netscapeUpgrade de-linux-mozillafirebirdUpgrade de-netscape7Upgrade pt_BR-netscape7 | Dec 10, 2025 | Sep 23, 2005 |
| Gentoo Linux | — | Upgrade net-libs/gecko-sdk.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-bin.Upgrade www-client/mozilla. | Oct 30, 2017 | Sep 23, 2005 |
| Mfsa2005 58 | — | Upgrade to Mozilla Firefox version 1.7.12 | Sep 29, 2005 | Sep 23, 2005 |
| Suse | — | Upgrade mozilla-mailUpgrade mozilla-jaUpgrade mozilla-csUpgrade mozilla-develUpgrade mozilla-deatUpgrade mozilla-ircUpgrade mozilla-dom-inspectorUpgrade mozillaUpgrade mozilla-venkmanUpgrade mozilla-calendarUpgrade mozilla-huUpgrade mozilla-ko | Feb 17, 2015 | Sep 23, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub