The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via byte order mark (BOM) characters that are removed from JavaScript code before execution, aka "Stripped BOM characters bug."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-js-debuggerUpgrade seamonkey-develUpgrade devhelp-develUpgrade devhelpUpgrade seamonkey-mailUpgrade seamonkeyUpgrade seamonkey-dom-inspectorUpgrade seamonkey-chatUpgrade firefoxUpgrade thunderbird | Dec 1, 2016 | Sep 24, 2008 |
| Freebsd | — | Upgrade linux-flockUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade firefoxUpgrade flockUpgrade seamonkeyUpgrade linux-firefox-develUpgrade linux-seamonkey-develUpgrade linux-firefoxUpgrade thunderbird | Dec 10, 2025 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner-bin. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 43 | — | Upgrade to Mozilla Firefox version 2.0.0.17Upgrade to Mozilla Firefox version 3.0.2 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.17 | Feb 22, 2012 | Sep 24, 2008 |
| Oracle_linux | — | Upgrade nssUpgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade xulrunnerUpgrade nss-toolsUpgrade devhelp-develUpgrade nss-develUpgrade nss-pkcs11-develUpgrade yelpUpgrade devhelpUpgrade firefox | Oct 16, 2024 | Sep 24, 2008 |
| Suse | — | Upgrade mozilla-deatUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-xulrunner190-translationsUpgrade MozillaThunderbird-translationsUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-develUpgrade mozilla-venkmanUpgrade suse-releaseUpgrade mozilla-xulrunner181-l10nUpgrade seamonkey-ircUpgrade mozilla-xulrunner190-64bitUpgrade mozilla-xulrunner181-develUpgrade mozilla-develUpgrade MozillaFirefox-translationsUpgrade seamonkeyUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-ircUpgrade MozillaFirefoxUpgrade gecko-sdkUpgrade seamonkey-dom-inspectorUpgrade mozilla-xulrunner190-translations-32bitUpgrade mozilla-xulrunner190-translations-64bitUpgrade mozilla-calendarUpgrade mozilla-csUpgrade mozilla-mailUpgrade MozillaThunderbird-develUpgrade mozilla-huUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner181-32bitUpgrade mozilla-xulrunner181Upgrade seamonkey-spellcheckerUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade seamonkey-mailUpgrade mozilla-dom-inspectorUpgrade mozilla-xulrunner181-64bitUpgrade mozilla | Feb 17, 2015 | Sep 24, 2008 |
| Ubuntu | — | Upgrade firefoxUpgrade xulrunner-1.9Upgrade thunderbirdUpgrade mozilla-thunderbirdUpgrade firefox-3.0 | Nov 8, 2024 | Sep 24, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub