The System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 does not prevent use of the cloneNode method for cloning a protected node, which allows remote attackers to bypass the Same Origin Policy or possibly execute arbitrary JavaScript code with chrome privileges via a crafted web site.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-develUpgrade xulrunnerUpgrade thunderbirdUpgrade firefox | Dec 1, 2016 | Apr 3, 2013 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade thunderbirdUpgrade firefoxUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade seamonkey | Dec 10, 2025 | Apr 3, 2013 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Apr 3, 2013 |
| Mfsa2013 36 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 17.0.5Upgrade to Mozilla Firefox version 20.0 | Apr 3, 2013 | Apr 2, 2013 |
| Mozilla Seamonkey | — | Upgrade to the latest version of Mozilla SeaMonkeyUpgrade to Mozilla SeaMonkey version 2.17 | Apr 3, 2013 | Apr 2, 2013 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 17.0.5Upgrade to Mozilla Thunderbird ESR version 17.0.5 | Apr 3, 2013 | Apr 2, 2013 |
| Oracle_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade xulrunner-develUpgrade xulrunner | Oct 16, 2024 | Apr 3, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 2, 2013 |
| Suse | — | Upgrade mozillafirefox-branding-upstreamUpgrade mozilla-js-x86Upgrade mozilla-nspr-debugsourceUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-develUpgrade mozilla-nss-sysinit-x86Upgrade MozillaThunderbird-translations-otherUpgrade xulrunner-debugsourceUpgrade libsoftokn3-x86Upgrade MozillaThunderbird-translations-commonUpgrade mozilla-nsprUpgrade MozillaThunderbird-debugsourceUpgrade libfreebl3-debuginfo-32bitUpgrade MozillaFirefox-debugsourceUpgrade xulrunner-x86Upgrade mozilla-nspr-debuginfoUpgrade libsoftokn3-debuginfoUpgrade mozilla-nss-sysinit-debuginfoUpgrade mozilla-nssUpgrade libsoftokn3-debuginfo-32bitUpgrade mozilla-nss-debugsourceUpgrade mozilla-nss-debuginfo-32bitUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-nspr-64bitUpgrade mozilla-nss-sysinit-32bitUpgrade enigmail-debuginfoUpgrade xulrunner-debuginfoUpgrade MozillaThunderbirdUpgrade MozillaFirefox-debuginfoUpgrade xulrunner-buildsymbolsUpgrade mozilla-nspr-develUpgrade xulrunner-debuginfo-x86Upgrade mozilla-nss-sysinitUpgrade sle-sdk-releaseUpgrade MozillaThunderbird-debuginfoUpgrade mozilla-jsUpgrade libsoftokn3-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade xulrunner-devel-debuginfoUpgrade mozilla-nss-tools-debuginfoUpgrade xulrunner-develUpgrade MozillaFirefoxUpgrade mozilla-nss-x86Upgrade seamonkey-translations-otherUpgrade seamonkey-debugsourceUpgrade MozillaThunderbird-develUpgrade xulrunner-32bitUpgrade mozilla-nss-toolsUpgrade libfreebl3-debuginfoUpgrade mozilla-nss-develUpgrade seamonkeyUpgrade seamonkey-translations-commonUpgrade enigmailUpgrade mozilla-js-debuginfo-x86Upgrade mozilla-js-debuginfo-32bitUpgrade libfreebl3-debuginfo-x86Upgrade mozilla-js-debuginfoUpgrade MozillaFirefox-translationsUpgrade MozillaThunderbird-buildsymbolsUpgrade libsoftokn3-debuginfo-x86Upgrade xulrunner-debuginfo-32bitUpgrade mozilla-nss-certs-x86Upgrade mozilla-nspr-x86Upgrade mozilla-nss-sysinit-debuginfo-x86Upgrade mozilla-nss-32bitUpgrade libfreebl3Upgrade mozilla-nss-certs-debuginfo-32bitUpgrade MozillaThunderbird-devel-debuginfoUpgrade libsoftokn3Upgrade mozilla-nss-certs-debuginfoUpgrade seamonkey-venkmanUpgrade seamonkey-dom-inspectorUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade mozilla-js-32bitUpgrade mozilla-nss-debuginfo-x86Upgrade mozilla-nspr-debuginfo-x86Upgrade mozilla-nspr-32bitUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-certs-debuginfo-x86Upgrade libfreebl3-32bitUpgrade mozilla-nss-certsUpgrade seamonkey-debuginfoUpgrade mozilla-nss-debuginfoUpgrade mozilla-nss-64bitUpgrade seamonkey-ircUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nspr-debuginfo-32bitUpgrade xulrunnerUpgrade libfreebl3-x86 | Feb 17, 2015 | Apr 3, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Apr 3, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub