The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a resource in a different domain, then reading content from the response, aka "response disclosure."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-dom-inspectorUpgrade seamonkey-nssUpgrade nspr-develUpgrade nss-pkcs11-develUpgrade firefoxUpgrade thunderbirdUpgrade nsprUpgrade seamonkey-mailUpgrade xulrunner-develUpgrade seamonkeyUpgrade seamonkey-js-debuggerUpgrade seamonkey-nss-develUpgrade seamonkey-develUpgrade nssUpgrade nss-develUpgrade seamonkey-nspr-develUpgrade xulrunner-devel-unstableUpgrade nss-toolsUpgrade seamonkey-nsprUpgrade seamonkey-chatUpgrade xulrunner | Dec 1, 2016 | Dec 17, 2008 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-thunderbirdUpgrade firefoxUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade thunderbird | Dec 10, 2025 | Dec 19, 2008 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade net-libs/xulrunner-bin.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/icecat. | Oct 30, 2017 | Dec 17, 2008 |
| Mfsa2008 64 | — | Upgrade to Mozilla Firefox version 3.0.5Upgrade to Mozilla Firefox version 2.0.0.19 | Jun 14, 2012 | Dec 17, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.14 | Feb 3, 2012 | Dec 17, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.19 | Feb 22, 2012 | Dec 17, 2008 |
| Oracle_linux | — | Upgrade firefoxUpgrade nss-develUpgrade nsprUpgrade nss-toolsUpgrade nspr-develUpgrade xulrunner-develUpgrade xulrunnerUpgrade nss-pkcs11-develUpgrade nssUpgrade xulrunner-devel-unstable | Oct 16, 2024 | Dec 17, 2008 |
| Suse | — | Upgrade mozilla-deatUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-xulrunner190-64bitUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-xulrunner190-translationsUpgrade MozillaFirefox-translationsUpgrade seamonkey-dom-inspectorUpgrade epiphanyUpgrade mozilla-xulrunner190-32bitUpgrade seamonkeyUpgrade mozilla-xulrunner181-64bitUpgrade mozilla-dom-inspectorUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner181-develUpgrade mozilla-venkmanUpgrade mozilla-xulrunner190Upgrade mozillaUpgrade mozilla-calendarUpgrade mozilla-xulrunner190-develUpgrade gecko-sdkUpgrade MozillaFirefoxUpgrade MozillaThunderbird-translationsUpgrade mozilla-mailUpgrade mozilla-xulrunner190-translations-32bitUpgrade seamonkey-spellcheckerUpgrade mozilla-develUpgrade mozilla-xulrunner181-l10n-32bitUpgrade mozilla-huUpgrade MozillaThunderbird-develUpgrade python-xpcom190Upgrade mozilla-xulrunner181Upgrade mozilla-xulrunner190-translations-64bitUpgrade seamonkey-venkmanUpgrade seamonkey-ircUpgrade mozilla-csUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-ircUpgrade seamonkey-mailUpgrade mozilla-xulrunner181-32bit | Feb 17, 2015 | Dec 17, 2008 |
| Ubuntu | — | Upgrade mozilla-thunderbirdUpgrade abrowserUpgrade firefox-3.0Upgrade thunderbirdUpgrade xulrunner-1.9Upgrade firefox | Nov 8, 2024 | Dec 17, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub