The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly restrict the nature or placement of HTML within a dropdown menu, which allows remote attackers to spoof the address bar or conduct clickjacking attacks via vectors that trigger navigation off of a page containing this element.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-firefoxUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade linux-thunderbirdUpgrade firefox | Dec 10, 2025 | Oct 30, 2013 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade dev-libs/nspr. | Oct 30, 2017 | Oct 30, 2013 |
| Mfsa2013 94 | — | Upgrade to Mozilla Firefox ESR version 24.1Upgrade to Mozilla Firefox version 25.0Upgrade to the latest version of Mozilla Firefox | Oct 30, 2013 | Oct 29, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.22.0 | Dec 8, 2014 | Oct 30, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 24.1Upgrade to the latest version of Mozilla Thunderbird | Oct 30, 2013 | Oct 29, 2013 |
| Suse | — | Upgrade MozillaFirefox-translations-commonUpgrade firefox-pcre-32bitUpgrade xulrunnerUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-xulrunner192-32bitUpgrade firefox-pixman-32bitUpgrade firefox-libgcc_s1Upgrade firefox-pangoUpgrade mozillafirefox-branding-upstreamUpgrade seamonkey-dom-inspectorUpgrade MozillaThunderbird-develUpgrade firefox-pcreUpgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade mozilla-xulrunner191-32bitUpgrade firefox-atk-32bitUpgrade mozilla-nspr-32bitUpgrade firefox-gtk2-langUpgrade MozillaThunderbird-translations-otherUpgrade seamonkey-translations-otherUpgrade firefox-libstdc++6-32bitUpgrade firefox-libgcc_s1-32bitUpgrade xulrunner-develUpgrade mozilla-js-32bitUpgrade firefox-glib2-32bitUpgrade mozilla-nss-toolsUpgrade seamonkey-ircUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner192-gnome-32bitUpgrade seamonkeyUpgrade mozilla-nss-32bitUpgrade firefox-fontconfig-32bitUpgrade enigmailUpgrade firefox-gtk2-32bitUpgrade mozilla-nss-develUpgrade mozilla-xulrunner191-translations-32bitUpgrade firefox-gtk2Upgrade xulrunner-32bitUpgrade firefox-pixmanUpgrade firefox-fontconfigUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner192-gnomeUpgrade firefox-freetype2-32bitUpgrade firefox-cairo-32bitUpgrade seamonkey-venkmanUpgrade MozillaThunderbird-buildsymbolsUpgrade mozilla-jsUpgrade MozillaThunderbirdUpgrade MozillaFirefoxUpgrade firefox-glib2Upgrade MozillaFirefox-develUpgrade firefox-atkUpgrade seamonkey-translations-commonUpgrade xulrunner-buildsymbolsUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-nspr-develUpgrade mozilla-nsprUpgrade firefox-cairoUpgrade mozilla-xulrunner192-translationsUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-nssUpgrade firefox-pango-32bitUpgrade mozilla-xulrunner192Upgrade firefox-freetype2Upgrade MozillaFirefox-branding-SLEDUpgrade firefox-libstdc++6Upgrade MozillaFirefox-translations | Feb 17, 2015 | Oct 30, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Oct 30, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub