Mozilla Firefox before 20.0 and SeaMonkey before 2.17 do not prevent origin spoofing of tab-modal dialogs, which allows remote attackers to conduct phishing attacks via a crafted web site.
CVSS Details
- CVSS 3.1 Base Score: 5.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade thunderbirdUpgrade firefoxUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade linux-thunderbirdUpgrade linux-firefox | Dec 10, 2025 | Apr 3, 2013 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Apr 3, 2013 |
| Mfsa2013 37 | — | Upgrade to Mozilla Firefox version 20.0Upgrade to the latest version of Mozilla Firefox | Apr 3, 2013 | Apr 2, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.17.0 | Apr 3, 2013 | Apr 2, 2013 |
| Suse | — | Upgrade mozilla-nss-tools-debuginfoUpgrade mozilla-nspr-develUpgrade seamonkey-translations-commonUpgrade mozilla-js-32bitUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-nss-sysinit-debuginfo-x86Upgrade mozilla-nspr-debugsourceUpgrade mozilla-js-x86Upgrade mozillafirefox-buildsymbolsUpgrade MozillaFirefox-translationsUpgrade seamonkey-ircUpgrade MozillaFirefox-debugsourceUpgrade mozilla-nss-toolsUpgrade libsoftokn3-32bitUpgrade xulrunner-develUpgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbirdUpgrade MozillaFirefox-translations-otherUpgrade mozilla-jsUpgrade mozilla-nss-certs-debuginfo-32bitUpgrade libfreebl3-debuginfoUpgrade mozilla-nss-sysinitUpgrade mozilla-nss-debuginfo-32bitUpgrade MozillaFirefoxUpgrade seamonkey-translations-otherUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-nss-x86Upgrade libsoftokn3Upgrade mozilla-nspr-debuginfoUpgrade enigmailUpgrade seamonkey-dom-inspectorUpgrade MozillaFirefox-debuginfoUpgrade xulrunner-debuginfo-32bitUpgrade mozilla-nspr-x86Upgrade xulrunner-debuginfo-x86Upgrade mozilla-nss-sysinit-debuginfoUpgrade mozilla-nss-debuginfo-x86Upgrade MozillaThunderbird-debugsourceUpgrade libsoftokn3-debuginfo-x86Upgrade xulrunner-debugsourceUpgrade mozilla-nspr-debuginfo-x86Upgrade seamonkey-debuginfoUpgrade mozilla-nss-certs-x86Upgrade libfreebl3-32bitUpgrade xulrunner-debuginfoUpgrade mozilla-js-debuginfo-x86Upgrade MozillaThunderbird-buildsymbolsUpgrade mozilla-nss-certsUpgrade xulrunner-x86Upgrade mozilla-nspr-debuginfo-32bitUpgrade mozilla-nss-debugsourceUpgrade seamonkeyUpgrade mozilla-nss-64bitUpgrade xulrunnerUpgrade mozilla-nss-develUpgrade mozilla-nspr-64bitUpgrade seamonkey-debugsourceUpgrade mozilla-nss-certs-debuginfo-x86Upgrade libsoftokn3-debuginfo-32bitUpgrade MozillaThunderbird-debuginfoUpgrade libfreebl3Upgrade xulrunner-32bitUpgrade mozilla-nss-certs-debuginfoUpgrade seamonkey-venkmanUpgrade mozilla-js-debuginfo-32bitUpgrade enigmail-debuginfoUpgrade xulrunner-buildsymbolsUpgrade mozilla-nss-sysinit-x86Upgrade mozilla-nss-sysinit-32bitUpgrade mozilla-js-debuginfoUpgrade libsoftokn3-x86Upgrade MozillaFirefox-branding-SLEDUpgrade libfreebl3-debuginfo-32bitUpgrade xulrunner-devel-debuginfoUpgrade libsoftokn3-debuginfoUpgrade sle-sdk-releaseUpgrade libfreebl3-x86Upgrade mozilla-nss-debuginfoUpgrade mozilla-nsprUpgrade MozillaThunderbird-devel-debuginfoUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade libfreebl3-debuginfo-x86Upgrade mozilla-nss-32bitUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nssUpgrade MozillaThunderbird-develUpgrade MozillaFirefox-devel | Feb 17, 2015 | Apr 3, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Apr 3, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub