The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML characters in attribute names, which allows remote attackers to bypass content filters that use regular expressions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-seamonkeyUpgrade linux-seamonkey-develUpgrade firefoxUpgrade seamonkeyUpgrade linux-mozilla-develUpgrade lightningUpgrade linux-firefox-develUpgrade mozilla-thunderbirdUpgrade mozillaUpgrade linux-mozillaUpgrade thunderbirdUpgrade linux-thunderbirdUpgrade firefox-jaUpgrade linux-firefox | Dec 10, 2025 | Feb 24, 2007 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey. | Oct 30, 2017 | Feb 26, 2007 |
| Mfsa2007 02 | — | Upgrade to Mozilla Firefox version 2.0.0.2Upgrade to Mozilla Firefox version 1.5.0.10 | Jun 14, 2012 | Feb 26, 2007 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.0.8 | Feb 3, 2012 | Feb 26, 2007 |
| Suse | — | Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefoxUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translations | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libnss3Upgrade firefoxUpgrade libnspr4 | Nov 8, 2024 | Feb 26, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub