The DOMParser component in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 loads subresources during parsing of text/html data within an extension, which allows remote attackers to obtain sensitive information by providing crafted data to privileged extension code.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade seamonkeyUpgrade libxulUpgrade thunderbirdUpgrade linux-firefoxUpgrade firefoxUpgrade linux-seamonkeyUpgrade linux-thunderbird | Dec 10, 2025 | Aug 30, 2012 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade dev-libs/nss. | Oct 30, 2017 | Aug 29, 2012 |
| Mfsa2012 68 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 15.0 | Aug 30, 2012 | Aug 29, 2012 |
| Mozilla Seamonkey | — | Upgrade to the latest version of Mozilla SeaMonkeyUpgrade to Mozilla SeaMonkey version 2.12 | Aug 30, 2012 | Aug 29, 2012 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 15.0Upgrade to the latest version of Mozilla Thunderbird | Aug 30, 2012 | Aug 29, 2012 |
| Suse | — | Upgrade libfreebl3-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nspr-x86Upgrade libfreebl3-32bitUpgrade mozilla-nssUpgrade mozilla-nss-32bitUpgrade MozillaThunderbird-develUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-translationsUpgrade mozilla-nss-x86Upgrade mozilla-nspr-develUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-toolsUpgrade mozilla-nss-develUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-develUpgrade mozilla-nspr-32bitUpgrade mozilla-nsprUpgrade MozillaThunderbirdUpgrade libfreebl3 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Aug 29, 2012 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub