Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent manual add-on installation in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that triggers an unspecified internal error.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-firefoxUpgrade libxulUpgrade seamonkeyUpgrade thunderbirdUpgrade firefoxUpgrade linux-thunderbirdUpgrade linux-seamonkey | Dec 10, 2025 | Sep 28, 2011 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird.Upgrade www-client/icecat.Upgrade www-client/firefox.Upgrade www-client/seamonkey. | Oct 30, 2017 | Sep 28, 2011 |
| Mfsa2011 40 | — | Upgrade to Mozilla Firefox version 7.0Upgrade to Mozilla Firefox version 3.6.23 | Jun 14, 2012 | Sep 28, 2011 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.4.0 | Feb 3, 2012 | Sep 28, 2011 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.15Upgrade to Mozilla Thunderbird version 7.0 | Feb 22, 2012 | Sep 28, 2011 |
| Oracle Solaris | — | Upgrade mail/thunderbird to version 7.0.1-0.175.0.2.0.2.0 on Solaris 11.0Upgrade web/browser/firefox to version 8.0-0.175.0.3.0.4.0 on Solaris 11.0Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 7.0.1-0.175.0.2.0.2.0 on Solaris 11.0Upgrade web/browser/firefox/multi-user-desktop to version 8.0-0.175.0.3.0.4.0 on Solaris 11.0Upgrade web/data/firefox-bookmarks to version 8.0-0.175.0.3.0.4.0 on Solaris 11.0 | May 29, 2017 | Sep 28, 2011 |
| Suse | — | Upgrade MozillaThunderbird-develUpgrade mozilla-xulrunner192-gnome-32bitUpgrade MozillaFirefox-translationsUpgrade MozillaFirefoxUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaThunderbirdUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner192 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Sep 29, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub