Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle attackers to spoof SSL servers in opportunistic circumstances via a valid certificate that is unacceptable to the user.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-thunderbirdUpgrade linux-firefoxUpgrade thunderbirdUpgrade firefoxUpgrade linux-seamonkeyUpgrade seamonkey | Dec 10, 2025 | Dec 14, 2013 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade dev-libs/nspr. | Oct 30, 2017 | Dec 11, 2013 |
| Mfsa2013 113 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 24.2Upgrade to Mozilla Firefox version 26.0 | Dec 12, 2013 | Dec 10, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.23.0 | Dec 8, 2014 | Dec 11, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 24.2Upgrade to the latest version of Mozilla Thunderbird | Dec 12, 2013 | Dec 10, 2013 |
| Oracle Solaris | — | Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Dec 11, 2013 |
| Suse | — | Upgrade mozilla-nssUpgrade firefox-freetype2Upgrade firefox-glib2Upgrade firefox-fontconfig-32bitUpgrade MozillaFirefox-translations-otherUpgrade firefox-pcreUpgrade firefox-libgcc_s1Upgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade firefox-pixman-32bitUpgrade MozillaThunderbird-develUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-pcre-32bitUpgrade firefox-cairoUpgrade firefox-freetype2-32bitUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner191-32bitUpgrade MozillaFirefox-develUpgrade libfreebl3-x86Upgrade mozillafirefox-branding-upstreamUpgrade firefox-gtk2-32bitUpgrade libsoftokn3Upgrade sle-sdk-releaseUpgrade mozilla-xulrunner191-translations-32bitUpgrade firefox-pango-32bitUpgrade mozilla-xulrunner192Upgrade seamonkey-venkmanUpgrade MozillaThunderbird-translations-otherUpgrade firefox-libgcc_s1-32bitUpgrade libfreebl3Upgrade mozilla-xulrunner192-translations-32bitUpgrade seamonkey-translations-otherUpgrade firefox-glib2-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefoxUpgrade mozilla-nss-toolsUpgrade mozilla-nsprUpgrade firefox-fontconfigUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner191Upgrade mozillafirefox-buildsymbolsUpgrade firefox-gtk2-langUpgrade firefox-libstdc++6Upgrade mozilla-nspr-develUpgrade mozilla-nss-x86Upgrade mozilla-nss-32bitUpgrade firefox-gtk2Upgrade seamonkey-dom-inspectorUpgrade firefox-cairo-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade firefox-pangoUpgrade firefox-libstdc++6-32bitUpgrade libfreebl3-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner191-translationsUpgrade seamonkeyUpgrade firefox-atkUpgrade firefox-atk-32bitUpgrade enigmailUpgrade libsoftokn3-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade firefox-pixmanUpgrade mozilla-nss-develUpgrade MozillaFirefox-translations-commonUpgrade libsoftokn3-x86Upgrade MozillaThunderbird-buildsymbolsUpgrade seamonkey-ircUpgrade MozillaFirefox-translationsUpgrade seamonkey-translations-common | Feb 17, 2015 | Dec 11, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Dec 11, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub