Mozilla Firefox before 1.5.0.7 and SeaMonkey before 1.0.5 allows remote attackers to bypass the security model and inject content into the sub-frame of another site via targetWindow.frames[n].document.open(), which facilitates spoofing and other attacks.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade thunderbird | Jul 30, 2024 | Sep 15, 2006 |
| Freebsd | — | Upgrade thunderbirdUpgrade firefoxUpgrade linux-seamonkey-develUpgrade seamonkeyUpgrade linux-mozillaUpgrade mozilla-thunderbirdUpgrade linux-firefoxUpgrade linux-seamonkeyUpgrade mozillaUpgrade linux-thunderbirdUpgrade linux-firefox-develUpgrade linux-mozilla-devel | Dec 10, 2025 | Sep 15, 2006 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox-bin. | Oct 30, 2017 | Sep 15, 2006 |
| Mfsa2006 61 | — | Upgrade to Mozilla Firefox version 1.5.0.7 | Nov 21, 2013 | Sep 15, 2006 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.0.5 | Nov 21, 2013 | Sep 15, 2006 |
| Ubuntu | — | Upgrade mozilla-mailnewsUpgrade firefoxUpgrade mozilla-psmUpgrade libnspr4Upgrade libnss3Upgrade mozilla-browser | Nov 8, 2024 | Sep 15, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub