The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox 3.6 before 3.6.2 does not offer plugins the expected window.location protection mechanism, which might allow remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via vectors that are specific to each affected plugin.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner.Upgrade www-client/icecat.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Mar 25, 2010 |
| Mfsa2010 10 | — | Upgrade to Mozilla Firefox version 3.6.2 | Jun 14, 2012 | Mar 25, 2010 |
| Suse | — | Upgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192-gnome-32bitUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefox | Aug 9, 2024 | Jun 28, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub