Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows scripts with the UniversalBrowserRead privilege to gain UniversalXPConnect privileges and possibly execute code or obtain sensitive data by reading into a privileged context.
CVSS Details
- CVSS 3.1 Base Score: 8.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade thunderbird | Jul 30, 2024 | Jul 27, 2006 |
| Freebsd | — | Upgrade firefoxUpgrade linux-firefox-develUpgrade mozilla-thunderbirdUpgrade mozillaUpgrade thunderbirdUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade linux-mozilla-develUpgrade linux-firefoxUpgrade linux-mozillaUpgrade linux-thunderbird | Dec 10, 2025 | Jul 27, 2006 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Jul 27, 2006 |
| Mfsa2006 53 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 1.5.0.5 | Aug 1, 2006 | Jul 26, 2006 |
| Ubuntu | — | Upgrade mozilla-thunderbird-locale-deUpgrade mozilla-thunderbird-locale-ukUpgrade mozilla-mailnewsUpgrade mozilla-thunderbird-inspectorUpgrade mozilla-thunderbird-typeaheadfindUpgrade mozilla-thunderbird-locale-plUpgrade libnspr4Upgrade mozilla-thunderbird-locale-frUpgrade mozilla-psmUpgrade mozilla-thunderbird-locale-itUpgrade mozilla-thunderbirdUpgrade libnss3Upgrade mozilla-browserUpgrade mozilla-thunderbird-enigmailUpgrade mozilla-thunderbird-locale-caUpgrade firefoxUpgrade mozilla-thunderbird-locale-nl | Nov 8, 2024 | Jul 27, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub