The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not prevent modifications to the prototype of an object, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by referencing Object.prototype.__proto__ in a crafted HTML document.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade thunderbirdUpgrade firefoxUpgrade linux-thunderbirdUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade libxulUpgrade linux-firefoxUpgrade ca_root_nss | Dec 10, 2025 | Jan 9, 2013 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Oct 30, 2017 | Jan 13, 2013 |
| Mfsa2013 14 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 17.0.2Upgrade to Mozilla Firefox version 18.0 | Nov 21, 2013 | Jan 13, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.15.0 | Nov 21, 2013 | Jan 13, 2013 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird ESR version 17.0.2Upgrade to Mozilla Thunderbird version 17.0.2 | Nov 21, 2013 | Jan 13, 2013 |
| Suse | — | Upgrade mozilla-nssUpgrade MozillaThunderbird-devel-debuginfoUpgrade enigmail-debuginfoUpgrade mozilla-nspr-debugsourceUpgrade MozillaThunderbird-debuginfoUpgrade libsoftokn3-debuginfo-32bitUpgrade firefox3-pangoUpgrade libfreebl3-x86Upgrade seamonkey-venkmanUpgrade MozillaFirefox-debugsourceUpgrade seamonkeyUpgrade xulrunner-x86Upgrade xulrunnerUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-jsUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-sysinitUpgrade MozillaFirefox-translations-commonUpgrade xulrunner-32bitUpgrade mozilla-nss-64bitUpgrade xulrunner-debugsourceUpgrade mozilla-js-x86Upgrade mozilla-nss-debuginfo-32bitUpgrade xulrunner-devel-debuginfoUpgrade xulrunner-buildsymbolsUpgrade MozillaThunderbird-translations-otherUpgrade sle-sdk-releaseUpgrade mozilla-nsprUpgrade xulrunner-debuginfoUpgrade mozilla-nspr-32bitUpgrade MozillaThunderbird-develUpgrade mozilla-nspr-64bitUpgrade libfreebl3Upgrade MozillaThunderbird-buildsymbolsUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-nss-debugsourceUpgrade seamonkey-debugsourceUpgrade mozilla-nss-certs-debuginfo-32bitUpgrade MozillaFirefox-develUpgrade MozillaThunderbirdUpgrade firefox3-cairo-32bitUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-nspr-develUpgrade mozilla-nss-sysinit-x86Upgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade mozilla-nspr-debuginfoUpgrade libfreebl3-debuginfo-32bitUpgrade libsoftokn3-debuginfoUpgrade mozilla-nss-certsUpgrade mozilla-nss-tools-debuginfoUpgrade firefox3-cairoUpgrade firefox3-gtk2-32bitUpgrade MozillaFirefox-translationsUpgrade seamonkey-debuginfoUpgrade libfreebl3-debuginfoUpgrade mozilla-nss-toolsUpgrade mozilla-nss-develUpgrade mozilla-nss-sysinit-debuginfo-x86Upgrade mozilla-nss-debuginfoUpgrade mozilla-nss-certs-debuginfo-x86Upgrade seamonkey-translations-commonUpgrade libfreebl3-debuginfo-x86Upgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbird-debugsourceUpgrade mozilla-nss-certs-32bitUpgrade libsoftokn3-x86Upgrade libfreebl3-32bitUpgrade mozilla-js-debuginfo-32bitUpgrade mozilla-js-32bitUpgrade xulrunner-debuginfo-x86Upgrade MozillaFirefox-debuginfoUpgrade mozilla-nss-sysinit-32bitUpgrade seamonkey-dom-inspectorUpgrade mozilla-nspr-debuginfo-32bitUpgrade MozillaFirefoxUpgrade seamonkey-ircUpgrade seamonkey-translations-otherUpgrade mozilla-nss-certs-x86Upgrade libsoftokn3-debuginfo-x86Upgrade xulrunner-debuginfo-32bitUpgrade libsoftokn3-32bitUpgrade mozilla-nss-debuginfo-x86Upgrade mozilla-nss-32bitUpgrade libsoftokn3Upgrade mozilla-js-debuginfo-x86Upgrade mozilla-nspr-debuginfo-x86Upgrade xulrunner-develUpgrade mozilla-nss-sysinit-debuginfoUpgrade firefox3-pango-32bitUpgrade mozilla-nss-certs-debuginfoUpgrade mozilla-nspr-x86Upgrade firefox3-gtk2Upgrade enigmailUpgrade mozilla-nss-x86Upgrade mozilla-js-debuginfo | Feb 17, 2015 | Jan 13, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Jan 13, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub