The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Content Security Policy (CSP) implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not block inline event handlers, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade xulrunnerUpgrade xulrunner-devel | Dec 1, 2016 | Jun 5, 2012 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-thunderbirdUpgrade firefoxUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade thunderbirdUpgrade libxul | Dec 10, 2025 | Jun 5, 2012 |
| Mfsa2012 36 | — | Upgrade to Mozilla Firefox ESR version 10.0.5Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 13.0 | Jun 14, 2012 | Jun 5, 2012 |
| Mozilla Seamonkey | — | Upgrade to the latest version of Mozilla SeaMonkeyUpgrade to Mozilla SeaMonkey version 2.10 | Jun 19, 2012 | Jun 5, 2012 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird ESR version 10.0.5Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 13.0 | Jun 19, 2012 | Jun 5, 2012 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade thunderbirdUpgrade firefoxUpgrade xulrunner-devel | Oct 16, 2024 | Jun 5, 2012 |
| Suse | — | Upgrade MozillaFirefoxUpgrade MozillaThunderbird-develUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-translationsUpgrade MozillaThunderbirdUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-common | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Jun 5, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub