The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle certain redirections involving data: URLs and Java LiveConnect scripts, which allows remote attackers to start processes, read arbitrary local files, and establish network connections via vectors involving a refresh value in the http-equiv attribute of a META element, which causes the wrong security principal to be used.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkeyUpgrade seamonkey-chatUpgrade seamonkey-dom-inspectorUpgrade firefoxUpgrade seamonkey-js-debuggerUpgrade seamonkey-mailUpgrade seamonkey-devel | Dec 1, 2016 | Dec 10, 2010 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade seamonkeyUpgrade libxulUpgrade linux-firefoxUpgrade linux-firefox-develUpgrade linux-thunderbirdUpgrade firefoxUpgrade thunderbird | Dec 10, 2025 | Dec 10, 2010 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner.Upgrade www-client/icecat.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/firefox. | Oct 30, 2017 | Dec 10, 2010 |
| Mfsa2010 79 | — | Upgrade to Mozilla Firefox version 3.5.16Upgrade to Mozilla Firefox version 3.6.13 | Jun 14, 2012 | Dec 10, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.11 | Feb 3, 2012 | Dec 10, 2010 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunnerUpgrade xulrunner-devel | Oct 16, 2024 | Dec 10, 2010 |
| Suse | — | Upgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefoxUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-32bit | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade xulrunner-1.9.1Upgrade firefox-3.0Upgrade firefoxUpgrade xulrunner-1.9.2Upgrade firefox-3.5 | Nov 8, 2024 | Dec 10, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub