Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade xulrunner-develUpgrade firefoxUpgrade xulrunner | Dec 1, 2016 | Aug 29, 2012 |
| Freebsd | — | Upgrade seamonkeyUpgrade libxulUpgrade firefoxUpgrade thunderbirdUpgrade linux-thunderbirdUpgrade linux-firefoxUpgrade linux-seamonkey | Dec 10, 2025 | Aug 30, 2012 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Aug 29, 2012 |
| Mfsa2012 59 | — | Upgrade to Mozilla Firefox ESR version 10.0.8Upgrade to Mozilla Firefox version 15.0Upgrade to the latest version of Mozilla Firefox | Aug 30, 2012 | Aug 29, 2012 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.12Upgrade to the latest version of Mozilla SeaMonkey | Aug 30, 2012 | Aug 29, 2012 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 15.0Upgrade to Mozilla Thunderbird ESR version 10.0.8Upgrade to the latest version of Mozilla Thunderbird | Aug 30, 2012 | Aug 29, 2012 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade xulrunnerUpgrade firefoxUpgrade thunderbird | Oct 16, 2024 | Aug 29, 2012 |
| Suse | — | Upgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nsprUpgrade MozillaFirefox-develUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-nss-toolsUpgrade MozillaThunderbirdUpgrade mozilla-nspr-develUpgrade mozilla-nss-develUpgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefox-translationsUpgrade mozilla-nss-32bitUpgrade mozilla-nspr-x86Upgrade libfreebl3-32bitUpgrade mozilla-nss-x86Upgrade mozilla-nssUpgrade libfreebl3Upgrade libfreebl3-x86Upgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbird-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Aug 29, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub