The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-mozilla-develUpgrade mozillaUpgrade firefox-jaUpgrade linux-mozillaUpgrade linux-seamonkey-develUpgrade linux-thunderbirdUpgrade linux-firefox-develUpgrade seamonkeyUpgrade firefoxUpgrade thunderbirdUpgrade mozilla-thunderbirdUpgrade linux-seamonkeyUpgrade linux-firefox | Dec 10, 2025 | Jul 19, 2007 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Jun 6, 2007 |
| Mfsa2007 20 | — | Upgrade to Mozilla Firefox version 2.0.0.5 | Jun 14, 2012 | Jun 6, 2007 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.3 | Feb 3, 2012 | Jun 6, 2007 |
| Oracle_linux | — | Upgrade firefoxUpgrade firefox-devel | Oct 16, 2024 | Jun 6, 2007 |
| Suse | — | Upgrade MozillaFirefoxUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-translationsUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Jun 6, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub