The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Firefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute Javascript with chrome privileges via an about: page such as about:mozilla.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mozilla-gtk2Upgrade ru-linux-mozillafirebirdUpgrade mozilla-gtk1Upgrade firefoxUpgrade pt_BR-netscape7Upgrade linux-phoenixUpgrade mozilla-thunderbirdUpgrade linux-firefoxUpgrade de-linux-netscapeUpgrade netscape7Upgrade linux-mozillaUpgrade linux-mozilla-develUpgrade ja-linux-mozillafirebird-gtk1Upgrade ja-netscape7Upgrade mozilla-embeddedUpgrade linux-netscapeUpgrade fr-linux-netscapeUpgrade ja-linux-netscapeUpgrade de-netscape7Upgrade fr-netscape7Upgrade mozilla-gtkUpgrade de-linux-mozillafirebirdUpgrade zhTW-linux-mozillafirebirdUpgrade mozilla+ipv6Upgrade phoenixUpgrade el-linux-mozillafirebirdUpgrade zhCN-linux-mozillafirebirdUpgrade ja-mozillafirebird-gtk2Upgrade linux-mozillafirebirdUpgrade mozilla-firebirdUpgrade mozilla | Dec 10, 2025 | Sep 23, 2005 |
| Gentoo Linux | — | Upgrade www-client/mozilla.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-bin.Upgrade net-libs/gecko-sdk. | Oct 30, 2017 | Sep 23, 2005 |
| Mfsa2005 58 | — | Upgrade to Mozilla Firefox version 1.7.12 | Oct 3, 2005 | Sep 23, 2005 |
| Suse | — | Upgrade mozilla-dom-inspectorUpgrade mozilla-venkmanUpgrade mozillaUpgrade mozilla-koUpgrade mozilla-deatUpgrade mozilla-calendarUpgrade mozilla-huUpgrade mozilla-mailUpgrade mozilla-ircUpgrade mozilla-csUpgrade mozilla-jaUpgrade mozilla-devel | Feb 17, 2015 | Sep 23, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub