The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-devel-unstableUpgrade thunderbirdUpgrade firefoxUpgrade xulrunner-develUpgrade xulrunner | Dec 1, 2016 | Apr 22, 2009 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade thunderbirdUpgrade linux-firefox-develUpgrade linux-seamonkey-develUpgrade firefoxUpgrade linux-thunderbird | Dec 10, 2025 | Apr 22, 2009 |
| Gentoo Linux | — | Upgrade www-client/icecat.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade dev-libs/nss.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Apr 22, 2009 |
| Mfsa2009 18 | — | Upgrade to Mozilla Firefox version 3.0.9 | Jun 14, 2012 | Apr 22, 2009 |
| Oracle_linux | — | Upgrade xulrunner-devel-unstableUpgrade firefoxUpgrade xulrunnerUpgrade xulrunner-devel | Oct 16, 2024 | Apr 22, 2009 |
| Suse | — | Upgrade mozilla-xulrunner191-translationsUpgrade MozillaFirefox-develUpgrade mozilla-nssUpgrade libfreebl3-x86Upgrade mozilla-nss-toolsUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner190-x86Upgrade gconf2-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade orbit2Upgrade orbit2-32bitUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner191Upgrade libidl-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade gconf2Upgrade mozilla-xulrunner192-x86Upgrade orbit2-x86Upgrade mozilla-nss-32bitUpgrade mozilla-nspr-32bitUpgrade libfreebl3-32bitUpgrade mozilla-nsprUpgrade mozilla-nss-x86Upgrade MozillaFirefoxUpgrade libidlUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-32bitUpgrade libfreebl3Upgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-translationsUpgrade gconf2-x86Upgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192Upgrade libidl-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner190Upgrade mozilla-nspr-x86Upgrade mozilla-xulrunner191-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox-3.0Upgrade xulrunner-1.9Upgrade abrowser | Nov 8, 2024 | Apr 22, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub