The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting (XSS) attacks.
CVSS Details
- CVSS 3.1 Base Score: 3.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade thunderbird | Jul 30, 2024 | Sep 15, 2006 |
| Freebsd | — | Upgrade linux-firefoxUpgrade firefoxUpgrade seamonkeyUpgrade mozilla-thunderbirdUpgrade linux-seamonkeyUpgrade linux-seamonkey-develUpgrade linux-mozillaUpgrade mozillaUpgrade linux-firefox-develUpgrade linux-mozilla-develUpgrade linux-thunderbirdUpgrade thunderbird | Dec 10, 2025 | Sep 15, 2006 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Sep 15, 2006 |
| Mfsa2006 62 | — | Upgrade to Mozilla Firefox version 1.5.0.7 | Nov 21, 2013 | Sep 15, 2006 |
| Ubuntu | — | Upgrade firefoxUpgrade libnss3 | Nov 8, 2024 | Sep 15, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub