PDF.js in Mozilla Firefox before 25.0 and Firefox ESR 24.x before 24.1 does not properly handle the appending of an IFRAME element, which allows remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges by using this element within an embedded PDF object.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade linux-firefoxUpgrade seamonkeyUpgrade firefox | Dec 10, 2025 | Oct 30, 2013 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade dev-libs/nspr.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Oct 30, 2013 |
| Mfsa2013 99 | — | Upgrade to Mozilla Firefox version 25.0Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 24.1 | Oct 30, 2013 | Oct 29, 2013 |
| Suse | — | Upgrade mozilla-nssUpgrade mozilla-jsUpgrade mozilla-xulrunner191-gnomevfsUpgrade seamonkey-dom-inspectorUpgrade xulrunner-buildsymbolsUpgrade mozilla-nsprUpgrade xulrunnerUpgrade MozillaThunderbird-buildsymbolsUpgrade mozillafirefox-buildsymbolsUpgrade MozillaFirefox-translationsUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nspr-develUpgrade mozilla-xulrunner192-32bitUpgrade firefox-pcreUpgrade firefox-cairoUpgrade seamonkey-translations-commonUpgrade firefox-pango-32bitUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-translations-32bitUpgrade firefox-atkUpgrade firefox-pangoUpgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbird-translations-commonUpgrade firefox-libgcc_s1Upgrade MozillaThunderbirdUpgrade mozilla-xulrunner192Upgrade MozillaThunderbird-develUpgrade mozillafirefox-branding-upstreamUpgrade firefox-pcre-32bitUpgrade firefox-freetype2Upgrade seamonkey-venkmanUpgrade firefox-pixman-32bitUpgrade mozilla-nss-32bitUpgrade seamonkeyUpgrade mozilla-xulrunner191-translations-32bitUpgrade mozilla-xulrunner192-translationsUpgrade firefox-glib2-32bitUpgrade firefox-fontconfig-32bitUpgrade firefox-gtk2-langUpgrade firefox-fontconfigUpgrade xulrunner-develUpgrade mozilla-xulrunner191Upgrade firefox-cairo-32bitUpgrade MozillaThunderbird-translations-otherUpgrade firefox-libstdc++6-32bitUpgrade firefox-libstdc++6Upgrade mozilla-js-32bitUpgrade seamonkey-translations-otherUpgrade firefox-glib2Upgrade firefox-freetype2-32bitUpgrade enigmailUpgrade xulrunner-32bitUpgrade firefox-gtk2-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade firefox-libgcc_s1-32bitUpgrade firefox-atk-32bitUpgrade MozillaFirefoxUpgrade mozilla-nss-toolsUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nspr-32bitUpgrade seamonkey-ircUpgrade mozilla-xulrunner191-32bitUpgrade firefox-pixmanUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade firefox-gtk2Upgrade mozilla-nss-develUpgrade mozilla-xulrunner192-gnome | Feb 17, 2015 | Oct 30, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Oct 30, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub