The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
mailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before 1.1.13, when JavaScript is enabled in mail, allows remote attackers to obtain sensitive information about the recipient, or comments in forwarded mail, via script that reads the (1) .documentURI or (2) .textContent DOM properties.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey-bin.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner-bin. | Oct 30, 2017 | Aug 13, 2009 |
| Ubuntu | — | Upgrade seamonkeyUpgrade thunderbird | Nov 19, 2024 | Aug 13, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub