Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechanism for codebase principals and execute arbitrary script via the -moz-binding CSS property in a signed JAR file.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nss-toolsUpgrade seamonkey-nss-develUpgrade seamonkey-nspr-develUpgrade seamonkey-develUpgrade devhelpUpgrade xulrunnerUpgrade nssUpgrade xulrunner-devel-unstableUpgrade seamonkey-chatUpgrade nss-develUpgrade seamonkey-nsprUpgrade seamonkey-js-debuggerUpgrade seamonkey-mailUpgrade nss-pkcs11-develUpgrade firefoxUpgrade seamonkeyUpgrade devhelp-develUpgrade seamonkey-nssUpgrade seamonkey-dom-inspectorUpgrade yelpUpgrade xulrunner-devel | Dec 1, 2016 | Nov 13, 2008 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade seamonkeyUpgrade firefoxUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade linux-firefox | Dec 10, 2025 | Nov 13, 2008 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey.Upgrade www-client/icecat.Upgrade www-client/firefox.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird. | Oct 30, 2017 | Nov 13, 2008 |
| Mfsa2008 57 | — | Upgrade to Mozilla Firefox version 2.0.0.18Upgrade to Mozilla Firefox version 3.0.4 | Jun 14, 2012 | Nov 13, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.13 | Feb 3, 2012 | Nov 13, 2008 |
| Oracle_linux | — | Upgrade nssUpgrade firefoxUpgrade nss-toolsUpgrade devhelp-develUpgrade nss-pkcs11-develUpgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade nss-develUpgrade yelpUpgrade devhelpUpgrade xulrunner-devel | Oct 16, 2024 | Nov 13, 2008 |
| Suse | — | Upgrade mozilla-xulrunner181-l10nUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade seamonkeyUpgrade seamonkey-dom-inspectorUpgrade mozillaUpgrade mozilla-xulrunner181-develUpgrade mozilla-csUpgrade seamonkey-venkmanUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner190-develUpgrade mozilla-xulrunner190-translationsUpgrade epiphany-develUpgrade mozilla-dom-inspectorUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-deatUpgrade mozilla-xulrunner190-64bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner181-64bitUpgrade gecko-sdkUpgrade mozilla-xulrunner190Upgrade mozilla-venkmanUpgrade epiphanyUpgrade seamonkey-spellcheckerUpgrade mozilla-xulrunner190-translations-64bitUpgrade mozilla-mailUpgrade mozilla-develUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner190-translations-32bitUpgrade suse-releaseUpgrade mozilla-xulrunner181Upgrade mozilla-calendarUpgrade MozillaFirefoxUpgrade mozilla-ircUpgrade mozilla-xulrunner181-32bitUpgrade epiphany-docUpgrade seamonkey-mailUpgrade mozilla-huUpgrade seamonkey-ircUpgrade epiphany-extensions | Feb 17, 2015 | Nov 13, 2008 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade firefox-3.0Upgrade abrowserUpgrade firefox | Nov 8, 2024 | Nov 13, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub