The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly implement JAR signing, which allows remote attackers to execute arbitrary code via (1) injection of JavaScript into documents within a JAR archive or (2) a JAR archive that uses relative URLs to JavaScript files.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade devhelpUpgrade xulrunner-devel-unstableUpgrade devhelp-develUpgrade firefoxUpgrade xulrunnerUpgrade yelpUpgrade xulrunner-devel | Dec 1, 2016 | Jul 7, 2008 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner-bin.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Jul 7, 2008 |
| Mfsa2008 23 | — | Upgrade to Mozilla Firefox version 2.0.0.15Upgrade to Mozilla Firefox version 3.0 | Jun 14, 2012 | Jul 7, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.10 | Feb 3, 2012 | Jul 7, 2008 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade xulrunnerUpgrade xulrunner-devel-unstableUpgrade yelpUpgrade firefoxUpgrade devhelpUpgrade devhelp-devel | Oct 16, 2024 | Jul 7, 2008 |
| Suse | — | Upgrade suse-releaseUpgrade seamonkey-ircUpgrade seamonkey-dom-inspectorUpgrade seamonkey-mailUpgrade seamonkey-spellcheckerUpgrade MozillaFirefoxUpgrade MozillaFirefox-translationsUpgrade seamonkey-venkmanUpgrade seamonkey | Feb 17, 2015 | Jul 7, 2008 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Jul 7, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub