The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade thunderbirdUpgrade xulrunner-devel-unstableUpgrade firefoxUpgrade xulrunner-devel | Dec 1, 2016 | Jun 12, 2009 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade linux-firefox-develUpgrade linux-firefoxUpgrade thunderbirdUpgrade firefoxUpgrade linux-thunderbirdUpgrade seamonkey | Dec 10, 2025 | Jun 12, 2009 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin.Upgrade www-client/icecat.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner-bin.Upgrade net-libs/xulrunner. | Oct 30, 2017 | Jun 12, 2009 |
| Mfsa2009 27 | — | Upgrade to Mozilla Firefox version 3.0.10 | Jun 14, 2012 | Jun 12, 2009 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.17 | Feb 3, 2012 | Jun 12, 2009 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.22 | Feb 22, 2012 | Jun 12, 2009 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunner-develUpgrade xulrunnerUpgrade xulrunner-devel-unstable | Oct 16, 2024 | Jun 12, 2009 |
| Suse | — | Upgrade orbit2Upgrade mozilla-xulrunner190-gnomevfsUpgrade gconf2-32bitUpgrade mozilla-nssUpgrade mozilla-xulrunner191-32bitUpgrade libfreebl3Upgrade libidl-x86Upgrade MozillaFirefox-branding-SLEDUpgrade libidl-32bitUpgrade mozilla-nspr-32bitUpgrade orbit2-x86Upgrade mozilla-xulrunner192Upgrade mozilla-nsprUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner191-x86Upgrade libfreebl3-x86Upgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner190-x86Upgrade gconf2Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nspr-x86Upgrade mozilla-nss-x86Upgrade MozillaFirefox-translationsUpgrade MozillaFirefoxUpgrade orbit2-32bitUpgrade gconf2-x86Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner191Upgrade libidlUpgrade mozilla-nss-32bit | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox-3.0Upgrade xulrunner-1.9Upgrade abrowser | Nov 8, 2024 | Jun 12, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub