The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly escape quote characters used for XML processing, which allows remote attackers to conduct XML injection attacks via the default namespace in an E4X document.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nss-toolsUpgrade firefoxUpgrade seamonkey-chatUpgrade nssUpgrade seamonkey-nssUpgrade thunderbirdUpgrade xulrunnerUpgrade seamonkey-nspr-develUpgrade nss-develUpgrade seamonkey-nsprUpgrade nss-pkcs11-develUpgrade xulrunner-develUpgrade seamonkeyUpgrade xulrunner-devel-unstableUpgrade seamonkey-develUpgrade devhelpUpgrade seamonkey-js-debuggerUpgrade seamonkey-dom-inspectorUpgrade yelpUpgrade seamonkey-nss-develUpgrade seamonkey-mailUpgrade devhelp-devel | Dec 1, 2016 | Nov 13, 2008 |
| Freebsd | — | Upgrade thunderbirdUpgrade seamonkeyUpgrade firefoxUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade linux-firefox | Dec 10, 2025 | Nov 13, 2008 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Nov 13, 2008 |
| Mfsa2008 58 | — | Upgrade to Mozilla Firefox version 3.0.4Upgrade to Mozilla Firefox version 2.0.0.18 | Jun 14, 2012 | Nov 13, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.13 | Feb 3, 2012 | Nov 13, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.18 | Feb 22, 2012 | Nov 13, 2008 |
| Oracle_linux | — | Upgrade devhelp-develUpgrade xulrunner-develUpgrade xulrunnerUpgrade nssUpgrade yelpUpgrade firefoxUpgrade nss-develUpgrade nss-pkcs11-develUpgrade devhelpUpgrade xulrunner-devel-unstableUpgrade nss-tools | Oct 16, 2024 | Nov 13, 2008 |
| Suse | — | Upgrade mozilla-xulrunner181-l10nUpgrade mozilla-csUpgrade mozilla-ircUpgrade mozilla-xulrunner181-64bitUpgrade mozilla-xulrunner181-develUpgrade seamonkey-spellcheckerUpgrade mozilla-deatUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-translations-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade seamonkeyUpgrade mozilla-dom-inspectorUpgrade MozillaThunderbirdUpgrade mozilla-develUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner190-develUpgrade epiphanyUpgrade seamonkey-dom-inspectorUpgrade MozillaThunderbird-translationsUpgrade seamonkey-mailUpgrade mozilla-mailUpgrade mozilla-xulrunner181Upgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade seamonkey-venkmanUpgrade MozillaFirefoxUpgrade suse-releaseUpgrade mozillaUpgrade mozilla-xulrunner190Upgrade mozilla-huUpgrade epiphany-develUpgrade mozilla-calendarUpgrade seamonkey-ircUpgrade mozilla-xulrunner190-translations-64bitUpgrade epiphany-extensionsUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner181-32bitUpgrade mozilla-xulrunner190-64bitUpgrade MozillaThunderbird-develUpgrade epiphany-docUpgrade gecko-sdkUpgrade mozilla-venkman | Feb 17, 2015 | Nov 13, 2008 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade firefox-3.0Upgrade abrowserUpgrade mozilla-thunderbirdUpgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Nov 13, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub