nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-js-debuggerUpgrade seamonkey-nss-develUpgrade firefox-debuginfoUpgrade seamonkeyUpgrade seamonkey-nssUpgrade seamonkey-develUpgrade seamonkey-mailUpgrade thunderbirdUpgrade seamonkey-chatUpgrade firefoxUpgrade seamonkey-nsprUpgrade seamonkey-dom-inspectorUpgrade seamonkey-nspr-devel | Dec 1, 2016 | Mar 4, 2009 |
| Gentoo Linux | — | Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird.Upgrade www-client/icecat.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey. | Oct 30, 2017 | Mar 4, 2009 |
| Mfsa2009 09 | — | Upgrade to Mozilla Firefox version 3.0.7 | Jun 14, 2012 | Mar 4, 2009 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.15 | Feb 3, 2012 | Mar 4, 2009 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.21 | Feb 22, 2012 | Mar 4, 2009 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade xulrunner-devel-unstableUpgrade xulrunner | Oct 16, 2024 | Mar 5, 2009 |
| Suse | — | Upgrade gconf2Upgrade MozillaFirefox-develUpgrade gconf2-32bitUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-nssUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner192-x86Upgrade orbit2-x86Upgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade libfreebl3-x86Upgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-nss-toolsUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner191Upgrade MozillaThunderbird-develUpgrade libidl-x86Upgrade MozillaFirefox-translations-otherUpgrade orbit2-32bitUpgrade orbit2Upgrade MozillaThunderbird-translations-otherUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner192Upgrade mozilla-nsprUpgrade mozilla-xulrunner190-x86Upgrade gconf2-x86Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-32bitUpgrade libfreebl3Upgrade mozilla-xulrunner191-x86Upgrade libidlUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner191-translationsUpgrade libfreebl3-32bitUpgrade mozilla-xulrunner190-32bitUpgrade libidl-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-nss-x86Upgrade mozilla-nspr-x86Upgrade MozillaFirefoxUpgrade mozilla-nspr-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade mozilla-thunderbirdUpgrade thunderbirdUpgrade xulrunner-1.9Upgrade firefoxUpgrade abrowser | Nov 8, 2024 | Mar 5, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub