Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks or install arbitrary add-ons via a crafted web site.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-develUpgrade thunderbirdUpgrade firefoxUpgrade xulrunner | Dec 1, 2016 | Aug 6, 2013 |
| Freebsd | — | Upgrade seamonkeyUpgrade linux-firefoxUpgrade thunderbirdUpgrade firefoxUpgrade linux-thunderbirdUpgrade linux-seamonkey | Dec 10, 2025 | Aug 8, 2013 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Aug 6, 2013 |
| Mfsa2013 72 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 17.0.8Upgrade to Mozilla Firefox version 23.0 | Aug 7, 2013 | Aug 6, 2013 |
| Mozilla Seamonkey | — | Upgrade to the latest version of Mozilla SeaMonkeyUpgrade to Mozilla SeaMonkey version 2.20 | Dec 8, 2014 | Aug 6, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird ESR version 17.0.8Upgrade to Mozilla Thunderbird version 17.0.8Upgrade to the latest version of Mozilla Thunderbird | Aug 7, 2013 | Aug 6, 2013 |
| Oracle_linux | — | Upgrade thunderbird | Oct 16, 2024 | Aug 7, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 7, 2013 |
| Suse | — | Upgrade mozilla-nss-certsUpgrade xulrunner-32bitUpgrade mozilla-nspr-32bitUpgrade seamonkey-dom-inspectorUpgrade mozilla-nss-32bitUpgrade mozilla-nss-sysinit-32bitUpgrade MozillaFirefoxUpgrade mozilla-nss-toolsUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-branding-SLEDUpgrade libsoftokn3Upgrade seamonkey-translations-otherUpgrade MozillaThunderbird-buildsymbolsUpgrade MozillaThunderbirdUpgrade MozillaFirefox-translations-otherUpgrade libfreebl3Upgrade mozilla-nsprUpgrade xulrunner-develUpgrade seamonkeyUpgrade seamonkey-venkmanUpgrade mozilla-nss-develUpgrade MozillaThunderbird-translations-commonUpgrade enigmailUpgrade mozilla-jsUpgrade mozilla-js-32bitUpgrade MozillaFirefox-develUpgrade mozilla-nspr-develUpgrade libsoftokn3-32bitUpgrade mozilla-nss-certs-32bitUpgrade mozillafirefox-buildsymbolsUpgrade xulrunnerUpgrade mozilla-nss-sysinitUpgrade seamonkey-translations-commonUpgrade MozillaFirefox-translations-commonUpgrade mozillafirefox-branding-upstreamUpgrade seamonkey-ircUpgrade MozillaThunderbird-develUpgrade xulrunner-buildsymbolsUpgrade libfreebl3-32bitUpgrade mozilla-nssUpgrade MozillaFirefox-translations | Feb 17, 2015 | Aug 6, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Aug 7, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub