Mozilla Firefox before 18.0 on Android and SeaMonkey before 2.15 do not restrict a touch event to a single IFRAME element, which allows remote attackers to obtain sensitive information or possibly conduct cross-site scripting (XSS) attacks via a crafted HTML document.
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade libxulUpgrade seamonkeyUpgrade linux-firefoxUpgrade firefoxUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade ca_root_nss | Dec 10, 2025 | Jan 9, 2013 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Jan 13, 2013 |
| Mfsa2013 06 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 18.0 | Jan 14, 2013 | Jan 13, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.15.0 | Jan 10, 2013 | Jan 8, 2013 |
| Suse | — | Upgrade MozillaFirefox-debuginfoUpgrade libsoftokn3-x86Upgrade mozilla-nspr-64bitUpgrade mozilla-nss-sysinit-x86Upgrade mozilla-nss-debugsourceUpgrade libsoftokn3-debuginfo-32bitUpgrade mozilla-nspr-develUpgrade firefox3-cairo-32bitUpgrade MozillaThunderbird-debugsourceUpgrade libsoftokn3-32bitUpgrade mozilla-nss-certs-debuginfo-x86Upgrade xulrunner-devel-debuginfoUpgrade mozilla-nss-debuginfo-32bitUpgrade firefox3-pangoUpgrade mozilla-nss-sysinitUpgrade seamonkey-ircUpgrade mozilla-js-x86Upgrade mozilla-nspr-debuginfoUpgrade xulrunner-buildsymbolsUpgrade libfreebl3-debuginfo-32bitUpgrade MozillaFirefox-debugsourceUpgrade mozilla-nspr-debuginfo-x86Upgrade mozillafirefox-branding-upstreamUpgrade mozillafirefox-buildsymbolsUpgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbirdUpgrade libsoftokn3-debuginfoUpgrade sle-sdk-releaseUpgrade mozilla-nspr-debugsourceUpgrade mozilla-jsUpgrade mozilla-nss-sysinit-debuginfoUpgrade mozilla-nss-certs-debuginfo-32bitUpgrade xulrunner-x86Upgrade xulrunner-debuginfo-x86Upgrade xulrunner-debuginfoUpgrade xulrunner-debugsourceUpgrade mozilla-nssUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-translationsUpgrade seamonkey-debugsourceUpgrade mozilla-nss-x86Upgrade MozillaThunderbird-debuginfoUpgrade xulrunner-32bitUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade MozillaThunderbird-devel-debuginfoUpgrade mozilla-nss-tools-debuginfoUpgrade mozilla-js-32bitUpgrade mozilla-nsprUpgrade libfreebl3Upgrade xulrunner-debuginfo-32bitUpgrade libfreebl3-debuginfo-x86Upgrade seamonkey-debuginfoUpgrade seamonkey-translations-commonUpgrade libsoftokn3-debuginfo-x86Upgrade mozilla-nss-32bitUpgrade mozilla-nss-debuginfo-x86Upgrade seamonkey-translations-otherUpgrade libfreebl3-x86Upgrade firefox3-cairoUpgrade enigmailUpgrade mozilla-nss-certs-x86Upgrade mozilla-js-debuginfoUpgrade mozilla-nss-develUpgrade mozilla-nspr-x86Upgrade mozilla-nss-debuginfoUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nss-sysinit-32bitUpgrade libfreebl3-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-nss-sysinit-debuginfo-x86Upgrade enigmail-debuginfoUpgrade mozilla-nspr-debuginfo-32bitUpgrade MozillaThunderbird-buildsymbolsUpgrade libfreebl3-debuginfoUpgrade firefox3-pango-32bitUpgrade xulrunner-develUpgrade seamonkey-dom-inspectorUpgrade MozillaThunderbird-develUpgrade mozilla-nss-certs-debuginfoUpgrade firefox3-gtk2-32bitUpgrade libsoftokn3Upgrade mozilla-js-debuginfo-x86Upgrade seamonkey-venkmanUpgrade mozilla-nss-certsUpgrade xulrunnerUpgrade mozilla-nss-64bitUpgrade firefox3-gtk2Upgrade mozilla-nss-certs-32bitUpgrade mozilla-nspr-32bitUpgrade seamonkeyUpgrade MozillaFirefox-translations-otherUpgrade mozilla-js-debuginfo-32bitUpgrade MozillaFirefox | Feb 17, 2015 | Jan 13, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub