The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox before 3.5.12, Thunderbird before 3.0.7, and SeaMonkey before 2.0.7 does not properly restrict scripted functions, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade thunderbirdUpgrade linux-firefox-develUpgrade seamonkeyUpgrade libxulUpgrade linux-firefoxUpgrade firefox | Dec 10, 2025 | Sep 8, 2010 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade www-client/seamonkey-bin.Upgrade www-client/icecat.Upgrade www-client/seamonkey.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner. | Oct 30, 2017 | Sep 9, 2010 |
| Mfsa2010 60 | — | Upgrade to Mozilla Firefox version 3.5.12 | Jun 14, 2012 | Sep 9, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.7 | Feb 3, 2012 | Sep 9, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.7 | Feb 22, 2012 | Sep 9, 2010 |
| Suse | — | Upgrade mozilla-xulrunner190Upgrade mozilla-nss-x86Upgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner191Upgrade mozilla-nspr-32bitUpgrade mozilla-nss-32bitUpgrade orbit2Upgrade libfreebl3-x86Upgrade mozilla-nsprUpgrade mozilla-xulrunner190-translationsUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefoxUpgrade libidlUpgrade gconf2Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191-translationsUpgrade orbit2-32bitUpgrade mozilla-xulrunner191-32bitUpgrade orbit2-x86Upgrade libfreebl3Upgrade mozilla-xulrunner191-x86Upgrade libidl-x86Upgrade mozilla-xulrunner192-translationsUpgrade gconf2-32bitUpgrade MozillaFirefox-translationsUpgrade libidl-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade libfreebl3-32bitUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner192-x86Upgrade mozilla-nspr-x86Upgrade gconf2-x86Upgrade mozilla-xulrunner192Upgrade mozilla-nssUpgrade mozilla-xulrunner190-32bit | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade thunderbird | Nov 8, 2024 | Sep 9, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub