The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not prevent modifications to the prototype of an object, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by referencing Object.prototype.__proto__ in a crafted HTML document.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade libxulUpgrade ca_root_nssUpgrade seamonkeyUpgrade linux-firefoxUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade linux-thunderbirdUpgrade firefox | Dec 10, 2025 | Jan 9, 2013 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey. | Oct 30, 2017 | Jan 13, 2013 |
| Mfsa2013 14 | — | Upgrade to Mozilla Firefox version 18.0Upgrade to Mozilla Firefox ESR version 17.0.2 | Nov 21, 2013 | Jan 13, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.15.0 | Nov 21, 2013 | Jan 13, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 17.0.2Upgrade to Mozilla Thunderbird ESR version 17.0.2 | Nov 21, 2013 | Jan 13, 2013 |
| Suse | — | Upgrade firefox3-gtk2-32bitUpgrade mozilla-nss-x86Upgrade firefox3-pango-32bitUpgrade MozillaFirefox-translationsUpgrade libsoftokn3-x86Upgrade mozilla-nspr-x86Upgrade firefox3-gtk2Upgrade mozilla-js-debuginfo-32bitUpgrade MozillaThunderbird-debugsourceUpgrade libfreebl3-debuginfoUpgrade libsoftokn3Upgrade seamonkey-translations-commonUpgrade mozilla-nss-certs-32bitUpgrade libfreebl3-debuginfo-x86Upgrade mozilla-nss-develUpgrade xulrunner-debuginfo-x86Upgrade xulrunner-debuginfo-32bitUpgrade mozillathunderbird-translations-commonUpgrade mozillafirefox-develUpgrade mozillafirefoxUpgrade mozilla-nspr-debuginfo-x86Upgrade mozillafirefox-translations-otherUpgrade xulrunner-develUpgrade mozilla-js-debuginfo-x86Upgrade mozillathunderbird-translations-otherUpgrade mozilla-nss-certs-x86Upgrade seamonkey-ircUpgrade enigmailUpgrade mozilla-js-debuginfoUpgrade mozilla-nss-sysinit-32bitUpgrade MozillaFirefox-debuginfoUpgrade mozilla-nss-certs-debuginfoUpgrade mozilla-nss-debuginfoUpgrade mozillathunderbirdUpgrade seamonkey-debuginfoUpgrade mozilla-nss-sysinit-debuginfo-x86Upgrade libsoftokn3-32bitUpgrade seamonkey-translations-otherUpgrade mozilla-nspr-debuginfo-32bitUpgrade libsoftokn3-debuginfo-x86Upgrade mozilla-nss-sysinit-debuginfoUpgrade mozilla-nss-certs-debuginfo-x86Upgrade mozilla-nss-debuginfo-x86Upgrade libfreebl3-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-js-32bitUpgrade firefox3-cairoUpgrade seamonkey-dom-inspectorUpgrade mozilla-nss-32bitUpgrade MozillaThunderbird-buildsymbolsUpgrade MozillaThunderbird-devel-debuginfoUpgrade seamonkey-debugsourceUpgrade libfreebl3-x86Upgrade xulrunner-devel-debuginfoUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-nss-tools-debuginfoUpgrade firefox3-cairo-32bitUpgrade libsoftokn3-debuginfoUpgrade mozilla-nss-sysinitUpgrade firefox3-pangoUpgrade mozilla-nspr-develUpgrade mozilla-nss-certsUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-nspr-64bitUpgrade libfreebl3-debuginfo-32bitUpgrade MozillaFirefox-debugsourceUpgrade MozillaThunderbird-develUpgrade seamonkeyUpgrade mozilla-js-x86Upgrade mozilla-jsUpgrade mozilla-nss-debuginfo-32bitUpgrade mozillafirefox-branding-sledUpgrade libsoftokn3-debuginfo-32bitUpgrade xulrunner-x86Upgrade mozilla-nssUpgrade enigmail-debuginfoUpgrade xulrunnerUpgrade MozillaThunderbird-debuginfoUpgrade seamonkey-venkmanUpgrade mozilla-nspr-debuginfoUpgrade mozillafirefox-translations-commonUpgrade xulrunner-32bitUpgrade mozilla-nss-64bitUpgrade mozilla-nss-certs-debuginfo-32bitUpgrade mozilla-nss-sysinit-x86Upgrade libfreebl3Upgrade mozilla-nspr-32bitUpgrade sle-sdk-releaseUpgrade xulrunner-debugsourceUpgrade xulrunner-buildsymbolsUpgrade mozilla-nspr-debugsourceUpgrade xulrunner-debuginfoUpgrade mozilla-nss-debugsourceUpgrade mozilla-nspr | Feb 17, 2015 | Jan 13, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Jan 13, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub