Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 on Mac OS X allow remote attackers to bypass the Same Origin Policy and create arbitrary socket connections via a crafted Java applet, related to the Java Embedding Plugin (JEP) and Java LiveConnect.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Mfsa2008 28 | — | Upgrade to Mozilla Firefox version 3.0Upgrade to Mozilla Firefox version 2.0.0.15 | Jun 14, 2012 | Jul 7, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.10 | Feb 3, 2012 | Jul 7, 2008 |
| Suse | — | Upgrade seamonkey-venkmanUpgrade seamonkey-spellcheckerUpgrade seamonkey-mailUpgrade seamonkey-ircUpgrade MozillaFirefoxUpgrade seamonkey-dom-inspectorUpgrade suse-releaseUpgrade seamonkeyUpgrade MozillaFirefox-translations | Feb 17, 2015 | Jul 7, 2008 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Jul 7, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub