The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-chatUpgrade firefoxUpgrade thunderbirdUpgrade seamonkey-nsprUpgrade seamonkey-dom-inspectorUpgrade seamonkey-mailUpgrade seamonkey-nspr-develUpgrade xulrunnerUpgrade seamonkey-develUpgrade seamonkey-nssUpgrade seamonkeyUpgrade xulrunner-develUpgrade seamonkey-nss-develUpgrade seamonkey-js-debugger | Dec 1, 2016 | Oct 27, 2010 |
| Freebsd | — | Upgrade firefoxUpgrade thunderbirdUpgrade linux-firefoxUpgrade seamonkeyUpgrade libxulUpgrade linux-firefox-develUpgrade linux-seamonkeyUpgrade linux-thunderbird | Dec 10, 2025 | Oct 28, 2010 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/icecat.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Oct 27, 2010 |
| Mfsa2010 73 | — | Upgrade to Mozilla Firefox version 3.5.15Upgrade to Mozilla Firefox version 3.6.12 | Jun 14, 2012 | Oct 27, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.10 | Feb 3, 2012 | Oct 27, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.6Upgrade to Mozilla Thunderbird version 3.0.10 | Feb 22, 2012 | Oct 27, 2010 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-devel | Oct 16, 2024 | Oct 27, 2010 |
| Suse | — | Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner192-develUpgrade libidl-32bitUpgrade mozilla-xulrunner190Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner192-32bitUpgrade gconf2-x86Upgrade mozilla-nss-x86Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner190-32bitUpgrade orbit2-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner192Upgrade MozillaFirefoxUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nspr-x86Upgrade libidlUpgrade libfreebl3-32bitUpgrade mozilla-nsprUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-develUpgrade orbit2Upgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner192-x86Upgrade mozilla-nssUpgrade libfreebl3-x86Upgrade MozillaThunderbird-develUpgrade libidl-x86Upgrade MozillaThunderbird-translations-otherUpgrade mozilla-xulrunner190-x86Upgrade orbit2-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade gconf2-32bitUpgrade libfreebl3Upgrade gconf2Upgrade mozilla-xulrunner191 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.1Upgrade abrowserUpgrade xulrunner-1.9.2Upgrade thunderbirdUpgrade firefox-3.5Upgrade firefox-3.0Upgrade firefox | Nov 8, 2024 | Oct 28, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub