Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to run arbitrary JavaScript with chrome privileges via unknown vectors in which "page content can pollute XPCNativeWrappers."
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nsprUpgrade seamonkey-nspr-develUpgrade seamonkey-develUpgrade xulrunnerUpgrade seamonkey-nsprUpgrade seamonkey-mailUpgrade nss-toolsUpgrade seamonkey-chatUpgrade nssUpgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade seamonkey-nssUpgrade nss-develUpgrade seamonkey-js-debuggerUpgrade seamonkey-dom-inspectorUpgrade seamonkeyUpgrade seamonkey-nss-develUpgrade firefoxUpgrade nspr-develUpgrade nss-pkcs11-develUpgrade thunderbird | Dec 1, 2016 | Dec 17, 2008 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade linux-firefoxUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade seamonkeyUpgrade firefox | Dec 10, 2025 | Dec 19, 2008 |
| Gentoo Linux | — | Upgrade dev-libs/nss.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade www-client/icecat.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox-bin. | Oct 30, 2017 | Dec 17, 2008 |
| Mfsa2008 68 | — | Upgrade to Mozilla Firefox version 2.0.0.19Upgrade to Mozilla Firefox version 3.0.5 | Jun 14, 2012 | Dec 17, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.14 | Feb 3, 2012 | Dec 17, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.19 | Feb 22, 2012 | Dec 17, 2008 |
| Oracle_linux | — | Upgrade nss-pkcs11-develUpgrade xulrunner-develUpgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade nssUpgrade nss-develUpgrade firefoxUpgrade nss-toolsUpgrade nspr-develUpgrade nspr | Oct 16, 2024 | Dec 17, 2008 |
| Suse | — | Upgrade gecko-sdkUpgrade seamonkey-spellcheckerUpgrade mozilla-xulrunner190-gnomevfsUpgrade seamonkeyUpgrade mozilla-mailUpgrade MozillaThunderbird-develUpgrade mozilla-ircUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-xulrunner181-64bitUpgrade MozillaFirefoxUpgrade MozillaThunderbird-translationsUpgrade mozilla-xulrunner190-translations-64bitUpgrade mozilla-xulrunner190-64bitUpgrade mozilla-dom-inspectorUpgrade mozilla-venkmanUpgrade MozillaFirefox-translationsUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-develUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-develUpgrade mozilla-huUpgrade seamonkey-mailUpgrade mozillaUpgrade mozilla-xulrunner190-translations-32bitUpgrade mozilla-deatUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-xulrunner181-l10n-32bitUpgrade epiphanyUpgrade mozilla-csUpgrade mozilla-xulrunner181-develUpgrade mozilla-xulrunner181Upgrade mozilla-calendarUpgrade seamonkey-dom-inspectorUpgrade MozillaThunderbirdUpgrade python-xpcom190Upgrade mozilla-xulrunner181-l10nUpgrade mozilla-xulrunner190-32bitUpgrade seamonkey-ircUpgrade mozilla-xulrunner181-32bit | Feb 17, 2015 | Dec 17, 2008 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade mozilla-thunderbirdUpgrade firefoxUpgrade abrowserUpgrade firefox-3.0Upgrade thunderbird | Nov 8, 2024 | Dec 17, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub