Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timing measurements involving the document.caretPositionFromPoint and document.elementFromPoint functions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade seamonkeyUpgrade firefoxUpgrade linux-seamonkey | Dec 10, 2025 | Feb 4, 2014 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade dev-libs/nspr.Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey. | Oct 30, 2017 | Feb 6, 2014 |
| Mfsa2014 05 | — | Upgrade to Mozilla Firefox version 27.0Upgrade to the latest version of Mozilla Firefox | Feb 5, 2014 | Feb 4, 2014 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.24Upgrade to the latest version of Mozilla SeaMonkey | Dec 8, 2014 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Feb 6, 2014 |
| Suse | — | Upgrade libfreebl3Upgrade mozilla-nsprUpgrade mozilla-nssUpgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefox-develUpgrade firefox-libgcc_s1Upgrade mozilla-nspr-32bitUpgrade libsoftokn3-x86Upgrade libfreebl3-x86Upgrade MozillaFirefox-translationsUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-develUpgrade MozillaFirefox-translations-otherUpgrade libsoftokn3-32bitUpgrade libsoftokn3Upgrade firefox-libstdc++6Upgrade mozilla-nss-toolsUpgrade mozilla-nss-x86Upgrade libfreebl3-32bitUpgrade MozillaFirefoxUpgrade mozilla-nss-32bit | Dec 18, 2015 | Feb 6, 2014 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Feb 6, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub