The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly handle the dropping of a tab element, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by establishing a content area and registering for drop events.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade firefoxUpgrade xulrunner-devel | Dec 1, 2016 | Aug 18, 2011 |
| Freebsd | — | Upgrade firefoxUpgrade thunderbirdUpgrade linux-thunderbirdUpgrade linux-firefoxUpgrade seamonkey | Dec 10, 2025 | Aug 16, 2011 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/icecat.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox. | Oct 30, 2017 | Aug 18, 2011 |
| Mfsa2011 30 | — | Upgrade to Mozilla Firefox version 3.6.20 | Aug 19, 2011 | Aug 16, 2011 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.12 | Feb 22, 2012 | Aug 18, 2011 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade xulrunner | Oct 16, 2024 | Aug 18, 2011 |
| Redhat_linux | — | No solution exists | Jul 16, 2026 | Aug 16, 2011 |
| Suse | — | Upgrade sap-aio-releaseUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner192-translations-otherUpgrade MozillaThunderbird-buildsymbolsUpgrade MozillaThunderbird-develUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-develUpgrade mozilla-js192Upgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192-gnome-32bitUpgrade enigmailUpgrade mozilla-xulrunner192-translations-common-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-translations-commonUpgrade mozilla-xulrunner192-translations-other-32bitUpgrade MozillaFirefoxUpgrade mozilla-js192-32bitUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-xulrunner192-buildsymbolsUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-32bit | Feb 17, 2015 | Aug 18, 2011 |
| Ubuntu | — | Upgrade thunderbirdUpgrade xulrunner-1.9.2Upgrade firefox | Nov 8, 2024 | Aug 18, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub