Mozilla Firefox before 3.6.26 and 4.x through 6.0, Thunderbird before 3.1.18 and 5.0 through 6.0, and SeaMonkey before 2.4 do not properly enforce the IPv6 literal address syntax, which allows remote attackers to obtain sensitive information by making XMLHttpRequest calls through a proxy and reading the error messages.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade firefoxUpgrade seamonkeyUpgrade thunderbirdUpgrade seamonkey-mailUpgrade seamonkey-chatUpgrade seamonkey-develUpgrade xulrunner-develUpgrade seamonkey-dom-inspectorUpgrade seamonkey-js-debugger | Dec 1, 2016 | Feb 1, 2012 |
| Freebsd | — | Upgrade thunderbirdUpgrade linux-seamonkeyUpgrade firefoxUpgrade seamonkeyUpgrade linux-thunderbirdUpgrade linux-firefox | Dec 10, 2025 | Feb 1, 2012 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner.Upgrade www-client/firefox.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade dev-libs/nss.Upgrade www-client/icecat.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Feb 1, 2012 |
| Mfsa2012 02 | — | Upgrade to Mozilla Firefox version 3.6.26Upgrade to Mozilla Firefox version 7.0Upgrade to the latest version of Mozilla Firefox | Jun 14, 2012 | Feb 1, 2012 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.4.0 | Feb 3, 2012 | Feb 1, 2012 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 7.0Upgrade to Mozilla Thunderbird version 3.1.18Upgrade to the latest version of Mozilla Thunderbird | Feb 22, 2012 | Feb 1, 2012 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade firefoxUpgrade xulrunner-devel | Oct 16, 2024 | Feb 1, 2012 |
| Suse | — | Upgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-gnome-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade xulrunner-1.9.2 | Nov 8, 2024 | Feb 1, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub