The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code via unknown vectors.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-develUpgrade seamonkey-chatUpgrade seamonkey-js-debuggerUpgrade seamonkey-mailUpgrade seamonkeyUpgrade thunderbirdUpgrade seamonkey-dom-inspector | Dec 1, 2016 | Sep 24, 2008 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade linux-firefox-develUpgrade linux-seamonkey-develUpgrade linux-flockUpgrade linux-firefoxUpgrade flockUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade thunderbirdUpgrade firefox | Dec 10, 2025 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 38 | — | Upgrade to Mozilla Firefox version 2.0.0.17 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.17 | Feb 22, 2012 | Sep 24, 2008 |
| Suse | — | Upgrade suse-releaseUpgrade mozilla-xulrunner181-develUpgrade mozilla-venkmanUpgrade MozillaFirefox-translationsUpgrade mozilla-calendarUpgrade MozillaThunderbirdUpgrade seamonkey-dom-inspectorUpgrade mozilla-xulrunner181-32bitUpgrade mozilla-xulrunner181-l10nUpgrade MozillaFirefoxUpgrade mozilla-csUpgrade seamonkeyUpgrade gecko-sdkUpgrade mozilla-develUpgrade seamonkey-ircUpgrade mozilla-ircUpgrade mozilla-deatUpgrade seamonkey-venkmanUpgrade mozilla-mailUpgrade mozillaUpgrade mozilla-xulrunner181-64bitUpgrade mozilla-dom-inspectorUpgrade MozillaThunderbird-develUpgrade MozillaThunderbird-translationsUpgrade mozilla-huUpgrade seamonkey-mailUpgrade mozilla-xulrunner181Upgrade seamonkey-spellchecker | Feb 17, 2015 | Sep 24, 2008 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade firefox-3.0Upgrade firefoxUpgrade thunderbirdUpgrade mozilla-thunderbird | Nov 8, 2024 | Sep 24, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub