The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which makes it easier for remote attackers to bypass the Content Security Policy (CSP) protection mechanism and conduct cross-site scripting (XSS) attacks via vectors involving SVG animations and the about:reader URL.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-c6-nsprUpgrade linux-thunderbirdUpgrade libxulUpgrade nssUpgrade thunderbirdUpgrade seamonkeyUpgrade firefox-esrUpgrade nsprUpgrade linux-firefoxUpgrade firefoxUpgrade linux-seamonkey | Dec 10, 2025 | Nov 19, 2015 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Nov 5, 2015 |
| Mfsa2015 118 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 42.0 | Nov 4, 2015 | Nov 3, 2015 |
| Oracle Solaris | — | Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Nov 5, 2015 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade MozillaFirefoxUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-common | Dec 18, 2015 | Nov 5, 2015 |
| Ubuntu | — | Upgrade firefox | Nov 9, 2015 | Nov 4, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub