Mozilla Firefox before 20.0 and SeaMonkey before 2.17 do not prevent origin spoofing of tab-modal dialogs, which allows remote attackers to conduct phishing attacks via a crafted web site.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade firefoxUpgrade seamonkey | Dec 10, 2025 | Apr 3, 2013 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Apr 3, 2013 |
| Mfsa2013 37 | — | Upgrade to Mozilla Firefox version 20.0Upgrade to the latest version of Mozilla Firefox | Apr 3, 2013 | Apr 2, 2013 |
| Mozilla Seamonkey | — | Upgrade to the latest version of Mozilla SeaMonkeyUpgrade to Mozilla SeaMonkey version 2.17 | Apr 3, 2013 | Apr 2, 2013 |
| Suse | — | Upgrade mozilla-nspr-debuginfoUpgrade MozillaThunderbird-translations-commonUpgrade enigmailUpgrade xulrunner-debugsourceUpgrade seamonkey-dom-inspectorUpgrade mozilla-nss-sysinit-debuginfo-x86Upgrade seamonkey-translations-otherUpgrade mozilla-nss-debuginfo-x86Upgrade libfreebl3-debuginfoUpgrade mozilla-nss-certs-x86Upgrade mozilla-nss-tools-debuginfoUpgrade mozilla-nss-sysinit-debuginfoUpgrade MozillaFirefox-debuginfoUpgrade mozilla-nss-x86Upgrade xulrunner-debuginfo-32bitUpgrade mozilla-nspr-debugsourceUpgrade mozilla-nss-certs-debuginfo-32bitUpgrade mozilla-js-x86Upgrade MozillaFirefox-debugsourceUpgrade seamonkey-ircUpgrade MozillaFirefox-translationsUpgrade seamonkey-translations-commonUpgrade MozillaFirefox-translations-commonUpgrade mozillafirefox-buildsymbolsUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-toolsUpgrade mozilla-nss-debuginfo-32bitUpgrade mozilla-nspr-develUpgrade mozilla-nspr-x86Upgrade libsoftokn3-32bitUpgrade xulrunner-debuginfo-x86Upgrade seamonkey-debuginfoUpgrade xulrunner-develUpgrade mozilla-nspr-debuginfo-x86Upgrade MozillaFirefoxUpgrade libsoftokn3Upgrade mozilla-nss-sysinitUpgrade MozillaThunderbirdUpgrade mozilla-jsUpgrade libsoftokn3-debuginfo-x86Upgrade mozillafirefox-branding-upstreamUpgrade mozilla-js-32bitUpgrade MozillaThunderbird-debugsourceUpgrade libfreebl3-32bitUpgrade MozillaFirefox-develUpgrade mozilla-js-debuginfo-x86Upgrade mozilla-nspr-32bitUpgrade xulrunner-devel-debuginfoUpgrade mozilla-js-debuginfoUpgrade libsoftokn3-debuginfo-32bitUpgrade seamonkeyUpgrade libsoftokn3-debuginfoUpgrade mozilla-nss-debugsourceUpgrade xulrunner-debuginfoUpgrade xulrunnerUpgrade mozilla-nss-develUpgrade mozilla-nss-64bitUpgrade libfreebl3-debuginfo-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nss-debuginfoUpgrade MozillaThunderbird-buildsymbolsUpgrade mozilla-nss-certs-32bitUpgrade MozillaThunderbird-develUpgrade mozilla-nssUpgrade mozilla-js-debuginfo-32bitUpgrade mozilla-nsprUpgrade mozilla-nspr-64bitUpgrade seamonkey-venkmanUpgrade MozillaThunderbird-debuginfoUpgrade mozilla-nss-certs-debuginfo-x86Upgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade enigmail-debuginfoUpgrade seamonkey-debugsourceUpgrade mozilla-nss-sysinit-x86Upgrade libfreebl3-x86Upgrade mozilla-nspr-debuginfo-32bitUpgrade MozillaThunderbird-devel-debuginfoUpgrade sle-sdk-releaseUpgrade libfreebl3Upgrade xulrunner-x86Upgrade xulrunner-buildsymbolsUpgrade mozilla-nss-certsUpgrade xulrunner-32bitUpgrade mozilla-nss-certs-debuginfoUpgrade libsoftokn3-x86Upgrade libfreebl3-debuginfo-x86Upgrade mozilla-nss-32bitUpgrade MozillaThunderbird-translations-other | Feb 17, 2015 | Apr 3, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Apr 3, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub