The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly restrict the nature or placement of HTML within a dropdown menu, which allows remote attackers to spoof the address bar or conduct clickjacking attacks via vectors that trigger navigation off of a page containing this element.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-seamonkeyUpgrade firefoxUpgrade thunderbirdUpgrade linux-thunderbirdUpgrade linux-firefoxUpgrade seamonkey | Dec 10, 2025 | Oct 30, 2013 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade dev-libs/nspr.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade www-client/seamonkey. | Oct 30, 2017 | Oct 30, 2013 |
| Mfsa2013 94 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 24.1Upgrade to Mozilla Firefox version 25.0 | Oct 30, 2013 | Oct 29, 2013 |
| Mozilla Seamonkey | — | Upgrade to the latest version of Mozilla SeaMonkeyUpgrade to Mozilla SeaMonkey version 2.22 | Dec 8, 2014 | Oct 30, 2013 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 24.1 | Oct 30, 2013 | Oct 29, 2013 |
| Suse | — | Upgrade firefox-freetype2-32bitUpgrade mozilla-nspr-32bitUpgrade seamonkeyUpgrade firefox-fontconfig-32bitUpgrade mozilla-xulrunner191-translations-32bitUpgrade seamonkey-venkmanUpgrade firefox-fontconfigUpgrade mozilla-js-32bitUpgrade firefox-atk-32bitUpgrade seamonkey-ircUpgrade firefox-gtk2Upgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner191Upgrade xulrunner-32bitUpgrade firefox-libstdc++6-32bitUpgrade firefox-glib2-32bitUpgrade mozilla-nss-toolsUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-nss-develUpgrade firefox-gtk2-langUpgrade mozilla-xulrunner191-32bitUpgrade enigmailUpgrade mozilla-xulrunner192-gnome-32bitUpgrade seamonkey-translations-otherUpgrade xulrunner-develUpgrade MozillaFirefoxUpgrade firefox-libgcc_s1-32bitUpgrade firefox-gtk2-32bitUpgrade firefox-cairo-32bitUpgrade firefox-pixmanUpgrade MozillaThunderbird-buildsymbolsUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaThunderbirdUpgrade mozillafirefox-branding-upstreamUpgrade firefox-pango-32bitUpgrade mozilla-nssUpgrade firefox-glib2Upgrade firefox-freetype2Upgrade MozillaThunderbird-develUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner192-32bitUpgrade firefox-atkUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-libgcc_s1Upgrade xulrunner-buildsymbolsUpgrade firefox-libstdc++6Upgrade seamonkey-translations-commonUpgrade mozilla-nsprUpgrade seamonkey-dom-inspectorUpgrade mozilla-xulrunner192-translationsUpgrade firefox-cairoUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-nspr-develUpgrade firefox-pcre-32bitUpgrade mozilla-jsUpgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbird-translations-commonUpgrade xulrunnerUpgrade firefox-pangoUpgrade mozillafirefox-buildsymbolsUpgrade firefox-pcreUpgrade firefox-pixman-32bit | Feb 17, 2015 | Oct 30, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Oct 30, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub