The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an "in-session phishing attack."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade gnome-python2-gtkmozembedUpgrade gnome-python2-gtkhtml2Upgrade totemUpgrade gnome-python2-libeggUpgrade devhelp-develUpgrade xulrunner-develUpgrade escUpgrade totem-mozpluginUpgrade firefoxUpgrade xulrunnerUpgrade yelpUpgrade gnome-python2-extrasUpgrade totem-develUpgrade gnome-python2-gtkspellUpgrade devhelp | Dec 1, 2016 | Jan 20, 2009 |
| Freebsd | — | Upgrade firefoxUpgrade linux-firefox-develUpgrade thunderbirdUpgrade seamonkey | Dec 10, 2025 | Jun 23, 2010 |
| Gentoo Linux | — | Upgrade www-client/icecat.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/mozilla-firefox-bin. | Oct 30, 2017 | Jan 20, 2009 |
| Mfsa2010 33 | — | Upgrade to Mozilla Firefox version 3.5.12Upgrade to Mozilla Firefox version 3.6.9 | Jun 14, 2012 | Jan 20, 2009 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.5 | Feb 3, 2012 | Jan 20, 2009 |
| Oracle_linux | — | Upgrade yelpUpgrade gnome-python2-libeggUpgrade totem-develUpgrade gnome-python2-gtkmozembedUpgrade devhelpUpgrade devhelp-develUpgrade escUpgrade totem-mozpluginUpgrade gnome-python2-extrasUpgrade totemUpgrade xulrunnerUpgrade xulrunner-develUpgrade firefoxUpgrade gnome-python2-gtkhtml2Upgrade gnome-python2-gtkspell | Oct 16, 2024 | Jan 20, 2009 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 13, 2009 |
| Suse | — | Upgrade gconf2-32bitUpgrade libfreebl3Upgrade orbit2-32bitUpgrade gconf2Upgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner192-develUpgrade mozilla-nssUpgrade libidl-x86Upgrade orbit2Upgrade libfreebl3-x86Upgrade mozilla-xulrunner192Upgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade orbit2-x86Upgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192-x86Upgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-develUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-nspr-32bitUpgrade MozillaFirefoxUpgrade libidl-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-nspr-x86Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-nsprUpgrade mozilla-nss-x86Upgrade gconf2-x86Upgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192-translationsUpgrade libidlUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner191-x86Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner190-translationsUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner190Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191-gnomevfsUpgrade libfreebl3-32bit | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade firefox-3.5Upgrade xulrunner-1.9.2Upgrade firefoxUpgrade abrowser | Nov 8, 2024 | Jan 20, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub