Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-3736.
CVSS Details
- CVSS 3.1 Base Score: 3.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-develUpgrade seamonkey-js-debuggerUpgrade xulrunner-devel-unstableUpgrade seamonkey-dom-inspectorUpgrade firefoxUpgrade seamonkeyUpgrade seamonkey-nss-develUpgrade seamonkey-nspr-develUpgrade seamonkey-nssUpgrade xulrunnerUpgrade seamonkey-mailUpgrade thunderbirdUpgrade seamonkey-chatUpgrade xulrunner-develUpgrade seamonkey-nspr | Dec 1, 2016 | Mar 25, 2010 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey-bin.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/icecat.Upgrade www-client/firefox.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey. | Oct 30, 2017 | Mar 25, 2010 |
| Mfsa2010 12 | — | Upgrade to Mozilla Firefox version 3.6.2Upgrade to Mozilla Firefox version 3.0.18 | Jun 14, 2012 | Mar 25, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.3 | Feb 3, 2012 | Mar 25, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.2 | Feb 22, 2012 | Mar 25, 2010 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunnerUpgrade xulrunner-develUpgrade xulrunner-devel-unstable | Oct 16, 2024 | Mar 25, 2010 |
| Suse | — | Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-develUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-x86Upgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox | Aug 9, 2024 | Jun 28, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefoxUpgrade xulrunner-1.9Upgrade seamonkeyUpgrade xulrunner-1.9.1 | Nov 19, 2024 | Mar 25, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub