The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easier for remote attackers to bypass application protection mechanisms that rely on Referer headers, such as with some Cross-Site Request Forgery (CSRF) mechanisms.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade seamonkeyUpgrade linux-firefox-develUpgrade flockUpgrade thunderbirdUpgrade firefoxUpgrade linux-seamonkeyUpgrade linux-flockUpgrade linux-seamonkey-develUpgrade linux-firefoxUpgrade linux-thunderbird | Dec 10, 2025 | Mar 30, 2008 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey. | Oct 30, 2017 | Mar 27, 2008 |
| Mfsa2008 16 | — | Upgrade to Mozilla Firefox version 2.0.0.13 | Jun 14, 2012 | Mar 27, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.9 | Feb 3, 2012 | Mar 27, 2008 |
| Oracle_linux | — | Upgrade firefox-develUpgrade firefox | Oct 16, 2024 | Mar 27, 2008 |
| Suse | — | Upgrade mozilla-huUpgrade MozillaFirefox-translationsUpgrade mozilla-mailUpgrade suse-releaseUpgrade seamonkey-ircUpgrade mozillaUpgrade seamonkey-mailUpgrade mozilla-xulrunner181Upgrade epiphanyUpgrade mozilla-venkmanUpgrade mozilla-xulrunner181-32bitUpgrade mozilla-calendarUpgrade epiphany-docUpgrade epiphany-extensionsUpgrade mozilla-csUpgrade mozilla-dom-inspectorUpgrade seamonkey-spellcheckerUpgrade mozilla-develUpgrade mozilla-ircUpgrade seamonkeyUpgrade mozilla-xulrunner181-develUpgrade mozilla-deatUpgrade seamonkey-dom-inspectorUpgrade epiphany-develUpgrade MozillaFirefoxUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-xulrunner181-64bitUpgrade seamonkey-venkman | Feb 17, 2015 | Mar 27, 2008 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Mar 27, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub