Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 do not prevent multiple wrapping of WebIDL objects, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-seamonkeyUpgrade thunderbirdUpgrade seamonkeyUpgrade libxulUpgrade firefoxUpgrade linux-thunderbirdUpgrade linux-firefox | Dec 10, 2025 | Feb 19, 2013 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Feb 19, 2013 |
| Mfsa2013 23 | — | Upgrade to Mozilla Firefox version 19.0Upgrade to the latest version of Mozilla Firefox | Feb 21, 2013 | Feb 19, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.16.0 | Feb 21, 2013 | Feb 19, 2013 |
| Suse | — | Upgrade seamonkey-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-develUpgrade mozilla-nspr-32bitUpgrade xulrunner-develUpgrade mozilla-nss-toolsUpgrade beagleUpgrade beagle-develUpgrade beagle-firefoxUpgrade MozillaThunderbird-translations-otherUpgrade xulrunner-debuginfo-32bitUpgrade xulrunner-debuginfoUpgrade libfreebl3-32bitUpgrade seamonkey-translations-otherUpgrade MozillaFirefoxUpgrade firefox3-python-baseUpgrade mozilla-js-32bitUpgrade beagle-langUpgrade mozilla-nss-x86Upgrade mozilla-nss-32bitUpgrade seamonkeyUpgrade mozilla-js-debuginfo-32bitUpgrade xulrunner-32bitUpgrade enigmailUpgrade mozilla-js-debuginfoUpgrade seamonkey-ircUpgrade MozillaThunderbird-debugsourceUpgrade chmsee-debuginfoUpgrade beagle-evolutionUpgrade beagle-guiUpgrade sle-sdk-releaseUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-nspr-develUpgrade xulrunner-buildsymbolsUpgrade mhtml-firefoxUpgrade MozillaThunderbird-develUpgrade MozillaFirefox-branding-SLEDUpgrade seamonkey-dom-inspectorUpgrade chmsee-debugsourceUpgrade MozillaFirefox-translationsUpgrade mozilla-nssUpgrade xulrunnerUpgrade xulrunner-devel-debuginfoUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-js-debuginfo-x86Upgrade MozillaThunderbird-debuginfoUpgrade MozillaFirefox-translations-commonUpgrade xulrunner-debugsourceUpgrade xulrunner-debuginfo-x86Upgrade xulrunner-x86Upgrade mozillafirefox-branding-upstreamUpgrade seamonkey-debuginfoUpgrade MozillaThunderbird-devel-debuginfoUpgrade MozillaFirefox-debugsourceUpgrade MozillaThunderbirdUpgrade MozillaFirefox-develUpgrade libfreebl3Upgrade seamonkey-venkmanUpgrade mozilla-nss-64bitUpgrade mozilla-nsprUpgrade MozillaFirefox-debuginfoUpgrade mozilla-js-x86Upgrade mozilla-nspr-64bitUpgrade MozillaThunderbird-buildsymbolsUpgrade chmseeUpgrade seamonkey-debugsourceUpgrade libfreebl3-x86Upgrade mozilla-nspr-x86Upgrade mozilla-jsUpgrade enigmail-debuginfo | Feb 17, 2015 | Feb 19, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Feb 19, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub