The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The implementation of digital signatures for JAR files in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possibly other products does not prevent calls from unsigned JavaScript code to signed code, which allows remote attackers to bypass the Same Origin Policy and gain privileges via a crafted web site, a different vulnerability than CVE-2008-2801.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade firefoxUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade linux-firefoxUpgrade seamonkey | Dec 10, 2025 | Aug 16, 2011 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/icecat.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Aug 18, 2011 |
| Mfsa2011 29 | — | Upgrade to Mozilla Firefox version 6.0 | Aug 19, 2011 | Aug 16, 2011 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.3.0 | Feb 2, 2012 | Aug 18, 2011 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Aug 18, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub