The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 ignores the '\0' escaped null character, which might allow remote attackers to bypass protection mechanisms such as sanitization routines.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nss-pkcs11-develUpgrade nsprUpgrade firefoxUpgrade nspr-develUpgrade xulrunner-develUpgrade nss-develUpgrade xulrunnerUpgrade nssUpgrade xulrunner-devel-unstableUpgrade nss-tools | Dec 1, 2016 | Dec 17, 2008 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade firefoxUpgrade thunderbirdUpgrade linux-firefox | Dec 10, 2025 | Dec 19, 2008 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Dec 17, 2008 |
| Mfsa2008 67 | — | Upgrade to Mozilla Firefox version 3.0.5Upgrade to Mozilla Firefox version 2.0.0.19 | Jun 14, 2012 | Dec 17, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.14 | Feb 3, 2012 | Dec 17, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.19 | Feb 22, 2012 | Dec 17, 2008 |
| Oracle_linux | — | Upgrade xulrunner-devel-unstableUpgrade nss-develUpgrade nss-toolsUpgrade nssUpgrade xulrunnerUpgrade xulrunner-develUpgrade nss-pkcs11-develUpgrade nspr-develUpgrade firefoxUpgrade nspr | Oct 16, 2024 | Dec 17, 2008 |
| Suse | — | Upgrade seamonkey-ircUpgrade mozilla-csUpgrade mozilla-deatUpgrade seamonkeyUpgrade mozilla-xulrunner190-develUpgrade seamonkey-mailUpgrade mozilla-mailUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner181-l10n-32bitUpgrade mozilla-xulrunner181Upgrade mozilla-xulrunner190-translations-32bitUpgrade mozilla-ircUpgrade mozilla-xulrunner190-translationsUpgrade MozillaThunderbirdUpgrade epiphanyUpgrade mozilla-xulrunner181-32bitUpgrade python-xpcom190Upgrade mozilla-develUpgrade seamonkey-spellcheckerUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-xulrunner190-translations-64bitUpgrade MozillaThunderbird-translationsUpgrade mozilla-xulrunner190-64bitUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-dom-inspectorUpgrade mozilla-huUpgrade MozillaThunderbird-develUpgrade mozilla-venkmanUpgrade mozilla-xulrunner181-64bitUpgrade seamonkey-dom-inspectorUpgrade mozilla-calendarUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner181-develUpgrade MozillaFirefox-translationsUpgrade MozillaFirefoxUpgrade mozillaUpgrade mozilla-xulrunner181-l10nUpgrade gecko-sdkUpgrade mozilla-xulrunner190 | Feb 17, 2015 | Dec 17, 2008 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade xulrunner-1.9Upgrade firefoxUpgrade abrowserUpgrade thunderbird | Nov 8, 2024 | Dec 17, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub