Cross-site request forgery (CSRF) vulnerability in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to hijack the authentication of arbitrary users for requests that were initiated by a plugin and received a 307 redirect to a page on a different web site.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-chatUpgrade seamonkey-js-debuggerUpgrade seamonkey-develUpgrade seamonkey-dom-inspectorUpgrade seamonkey-mailUpgrade firefoxUpgrade seamonkey | Dec 1, 2016 | Mar 2, 2011 |
| Freebsd | — | Upgrade thunderbirdUpgrade libxulUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade firefoxUpgrade linux-firefoxUpgrade linux-thunderbirdUpgrade linux-firefox-devel | Dec 10, 2025 | Mar 1, 2011 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird.Upgrade dev-libs/nss.Upgrade www-client/icecat. | Oct 30, 2017 | Mar 2, 2011 |
| Mfsa2011 10 | — | Upgrade to Mozilla Firefox version 3.5.17Upgrade to Mozilla Firefox version 3.6.14 | Jun 14, 2012 | Mar 2, 2011 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.12 | Feb 3, 2012 | Mar 2, 2011 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunner-develUpgrade xulrunner | Oct 16, 2024 | Mar 2, 2011 |
| Suse | — | Upgrade mozilla-xulrunner192Upgrade MozillaFirefoxUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-x86Upgrade MozillaFirefox-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade xulrunner-1.9.1Upgrade firefox | Nov 8, 2024 | Mar 2, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub