The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade xulrunner-develUpgrade xulrunnerUpgrade xulrunner-devel-unstableUpgrade thunderbird | Dec 1, 2016 | Apr 22, 2009 |
| Freebsd | — | Upgrade seamonkeyUpgrade firefoxUpgrade thunderbirdUpgrade linux-seamonkey-develUpgrade linux-firefox-develUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade linux-thunderbird | Dec 10, 2025 | Apr 22, 2009 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/icecat.Upgrade mail-client/thunderbird.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade www-client/seamonkey. | Oct 30, 2017 | Apr 22, 2009 |
| Mfsa2009 19 | — | Upgrade to Mozilla Firefox version 3.0.9 | Jun 14, 2012 | Apr 22, 2009 |
| Oracle_linux | — | Upgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade firefoxUpgrade xulrunner-devel | Oct 16, 2024 | Apr 22, 2009 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner191Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-branding-SLEDUpgrade libfreebl3-x86Upgrade mozilla-xulrunner192-x86Upgrade orbit2-x86Upgrade libidl-x86Upgrade mozilla-xulrunner191-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-nssUpgrade gconf2-32bitUpgrade gconf2Upgrade orbit2Upgrade libidlUpgrade mozilla-xulrunner192Upgrade orbit2-32bitUpgrade gconf2-x86Upgrade mozilla-nsprUpgrade mozilla-nspr-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-nss-x86Upgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner191-x86Upgrade libfreebl3Upgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner192-translationsUpgrade libfreebl3-32bitUpgrade libidl-32bitUpgrade mozilla-xulrunner190Upgrade MozillaFirefox | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade firefox-3.0Upgrade thunderbirdUpgrade abrowser | Nov 8, 2024 | Apr 22, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub