The nsIScriptableUnescapeHTML.parseFragment method in the ParanoidFragmentSink protection mechanism in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 does not properly sanitize HTML in a chrome document, which makes it easier for remote attackers to execute arbitrary JavaScript with chrome privileges via a javascript: URI in input to an extension, as demonstrated by a javascript:alert sequence in (1) the HREF attribute of an A element or (2) the ACTION attribute of a FORM element.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefox | Dec 1, 2016 | Apr 28, 2010 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade libxulUpgrade linux-firefoxUpgrade thunderbirdUpgrade seamonkeyUpgrade firefoxUpgrade linux-firefox-develUpgrade linux-seamonkey | Dec 10, 2025 | Mar 1, 2011 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/icecat.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner. | Oct 30, 2017 | Apr 28, 2010 |
| Mfsa2011 08 | — | Upgrade to Mozilla Firefox version 3.5.17Upgrade to Mozilla Firefox version 3.6.14 | Jun 14, 2012 | Apr 28, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.12 | Feb 3, 2012 | Apr 28, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.8 | Feb 22, 2012 | Apr 28, 2010 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade thunderbirdUpgrade firefoxUpgrade xulrunner | Oct 16, 2024 | Apr 28, 2010 |
| Suse | — | Upgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbirdUpgrade MozillaFirefoxUpgrade MozillaThunderbird-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbirdUpgrade xulrunner-1.9.1Upgrade xulrunner-1.9.2 | Nov 8, 2024 | Apr 28, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub