The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to spoof an SSL indicator for an http URL or a file URL by setting document.location to an https URL corresponding to a site that responds with a No Content (aka 204) status code and an empty body.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkeyUpgrade xulrunner-devel-unstableUpgrade seamonkey-develUpgrade xulrunnerUpgrade seamonkey-js-debuggerUpgrade xulrunner-develUpgrade seamonkey-mailUpgrade seamonkey-dom-inspectorUpgrade seamonkey-chatUpgrade firefox | Dec 1, 2016 | Dec 17, 2009 |
| Freebsd | — | Upgrade seamonkeyUpgrade firefoxUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade linux-firefox | Dec 10, 2025 | Dec 16, 2009 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/icecat.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner.Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Dec 17, 2009 |
| Mfsa2009 69 | — | Upgrade to Mozilla Firefox version 3.5.6Upgrade to Mozilla Firefox version 3.0.16 | Jun 14, 2012 | Dec 17, 2009 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.1 | Feb 3, 2012 | Dec 17, 2009 |
| Oracle_linux | — | Upgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade xulrunnerUpgrade firefox | Oct 16, 2024 | Dec 17, 2009 |
| Suse | — | Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner190-gnomevfsUpgrade orbit2-32bitUpgrade gconf2-32bitUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner190-translationsUpgrade gconf2Upgrade mozilla-nssUpgrade orbit2-x86Upgrade mozilla-nss-32bitUpgrade libfreebl3-32bitUpgrade mozilla-nss-x86Upgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner192Upgrade libidl-x86Upgrade mozilla-xulrunner192-x86Upgrade libfreebl3Upgrade gconf2-x86Upgrade libfreebl3-x86Upgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner192-translationsUpgrade libidl-32bitUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner191-32bitUpgrade MozillaFirefoxUpgrade libidlUpgrade orbit2Upgrade MozillaFirefox-translationsUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner192-32bitUpgrade mozilla-nsprUpgrade mozilla-nspr-x86Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191Upgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192-gnome | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade xulrunner-1.9.1Upgrade firefox-3.5Upgrade xulrunner-1.9Upgrade firefox-3.0 | Nov 8, 2024 | Dec 17, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub