The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Style Inspector in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 does not properly restrict the context of HTML markup and Cascading Style Sheets (CSS) token sequences, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted stylesheet.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade xulrunner | Dec 1, 2016 | Nov 21, 2012 |
| Freebsd | — | Upgrade linux-firefoxUpgrade libxulUpgrade seamonkeyUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade firefoxUpgrade thunderbird | Dec 10, 2025 | Nov 20, 2012 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner.Upgrade www-client/icecat.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Nov 21, 2012 |
| Mfsa2012 104 | — | Upgrade to Mozilla Firefox ESR version 10.0.11Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 17.0 | Nov 14, 2013 | Nov 21, 2012 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade xulrunner | Oct 16, 2024 | Nov 21, 2012 |
| Suse | — | Upgrade libfreebl3-x86Upgrade libfreebl3Upgrade mozilla-nss-32bitUpgrade mozilla-nss-develUpgrade mozilla-nss-x86Upgrade libfreebl3-32bitUpgrade mozilla-nss-toolsUpgrade MozillaFirefoxUpgrade MozillaFirefox-translationsUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-develUpgrade mozilla-nssUpgrade MozillaFirefox-translations-other | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Nov 21, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub