Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Options protection mechanism, which allows remote attackers to conduct clickjacking attacks via a crafted web site that uses the HTTP server push feature with multipart responses.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade thunderbirdUpgrade linux-firefoxUpgrade firefoxUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade linux-thunderbird | Dec 10, 2025 | Jun 26, 2013 |
| Mfsa2013 58 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 22.0 | Jun 26, 2013 | Jun 25, 2013 |
| Mozilla Seamonkey | — | Upgrade to the latest version of Mozilla SeaMonkeyUpgrade to Mozilla SeaMonkey version 2.19 | Jul 16, 2013 | Jun 25, 2013 |
| Suse | — | Upgrade MozillaFirefox-develUpgrade mozillafirefox-branding-upstreamUpgrade seamonkey-translations-otherUpgrade seamonkey-ircUpgrade mozillafirefox-buildsymbolsUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nsprUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translations-commonUpgrade seamonkey-venkmanUpgrade mozilla-nspr-develUpgrade seamonkey-dom-inspectorUpgrade MozillaFirefoxUpgrade seamonkeyUpgrade seamonkey-translations-common | Feb 17, 2015 | Jun 25, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Jun 26, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub