The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 assign the system principal, rather than the sandbox principal, to XMLHttpRequest objects created in sandboxes, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks or obtain sensitive information by leveraging a sandboxed add-on.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-firefoxUpgrade thunderbirdUpgrade seamonkeyUpgrade firefoxUpgrade libxulUpgrade linux-thunderbirdUpgrade linux-seamonkey | Dec 10, 2025 | Nov 20, 2012 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey.Upgrade www-client/icecat.Upgrade www-client/firefox.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Nov 21, 2012 |
| Mfsa2012 97 | — | Upgrade to Mozilla Firefox version 17.0Upgrade to the latest version of Mozilla Firefox | Nov 21, 2012 | Nov 20, 2012 |
| Mozilla Seamonkey | — | Upgrade to the latest version of Mozilla SeaMonkeyUpgrade to Mozilla SeaMonkey version 2.14 | Nov 21, 2012 | Nov 20, 2012 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 17.0 | Nov 21, 2012 | Nov 20, 2012 |
| Suse | — | Upgrade libfreebl3-32bitUpgrade libfreebl3Upgrade mozilla-nssUpgrade MozillaThunderbirdUpgrade MozillaFirefox-translationsUpgrade mozilla-nss-32bitUpgrade mozilla-nss-x86Upgrade MozillaFirefox-translations-commonUpgrade libfreebl3-x86Upgrade MozillaThunderbird-develUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefoxUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-nss-toolsUpgrade mozilla-nss-devel | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Nov 21, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub