The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mozilla-gtkUpgrade de-netscape7Upgrade fr-netscape7Upgrade de-linux-netscapeUpgrade linux-phoenixUpgrade mozilla-gtk2Upgrade linux-firefoxUpgrade ja-mozillafirebird-gtk2Upgrade pt_BR-netscape7Upgrade zhTW-linux-mozillafirebirdUpgrade netscape7Upgrade mozilla-thunderbirdUpgrade mozilla-gtk1Upgrade mozilla+ipv6Upgrade mozilla-embeddedUpgrade linux-mozillafirebirdUpgrade zhCN-linux-mozillafirebirdUpgrade de-linux-mozillafirebirdUpgrade ja-netscape7Upgrade mozillaUpgrade firefoxUpgrade ru-linux-mozillafirebirdUpgrade ja-linux-mozillafirebird-gtk1Upgrade linux-mozilla-develUpgrade fr-linux-netscapeUpgrade ja-linux-netscapeUpgrade phoenixUpgrade mozilla-firebirdUpgrade linux-netscapeUpgrade el-linux-mozillafirebirdUpgrade linux-mozilla | Dec 10, 2025 | Sep 22, 2005 |
| Ubuntu | — | Upgrade mozilla-mailnewsUpgrade mozilla-browser | Nov 8, 2024 | Sep 20, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub