The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that inserts a (1) javascript: or (2) data: link into an about:blank document loaded by chrome via (a) the window.open function or (b) a content.location assignment, aka "Cross Context Scripting." NOTE: this issue is caused by a CVE-2007-3089 regression.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey.Upgrade mail-client/mozilla-thunderbird. | Oct 30, 2017 | Aug 7, 2007 |
| Mfsa2007 26 | — | Upgrade to Mozilla Firefox version 2.0.0.6 | Jun 14, 2012 | Aug 7, 2007 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.4 | Feb 3, 2012 | Aug 7, 2007 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.6Upgrade to Mozilla Thunderbird version 1.5.0.13 | Feb 22, 2012 | Aug 7, 2007 |
| Oracle_linux | — | Upgrade firefoxUpgrade firefox-devel | Oct 16, 2024 | Aug 8, 2007 |
| Suse | — | Upgrade mozilla-venkmanUpgrade mozilla-mailUpgrade mozillaUpgrade mozilla-huUpgrade seamonkey-ircUpgrade suse-releaseUpgrade seamonkey-mailUpgrade MozillaFirefox-translationsUpgrade mozilla-calendarUpgrade MozillaFirefoxUpgrade mozilla-develUpgrade seamonkeyUpgrade seamonkey-venkmanUpgrade mozilla-ircUpgrade mozilla-deatUpgrade mozilla-csUpgrade mozilla-dom-inspectorUpgrade seamonkey-spellcheckerUpgrade seamonkey-dom-inspector | Feb 17, 2015 | Aug 7, 2007 |
| Ubuntu | — | Upgrade mozilla-thunderbirdUpgrade firefox | Nov 8, 2024 | Aug 8, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub