The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkeyUpgrade xulrunner-develUpgrade xulrunnerUpgrade seamonkey-nssUpgrade seamonkey-js-debuggerUpgrade seamonkey-nss-develUpgrade seamonkey-nspr-develUpgrade seamonkey-develUpgrade seamonkey-nsprUpgrade seamonkey-dom-inspectorUpgrade thunderbirdUpgrade firefoxUpgrade seamonkey-mailUpgrade seamonkey-chat | Dec 1, 2016 | Oct 27, 2010 |
| Freebsd | — | Upgrade thunderbirdUpgrade linux-firefox-develUpgrade linux-firefoxUpgrade seamonkeyUpgrade libxulUpgrade firefoxUpgrade linux-thunderbirdUpgrade linux-seamonkey | Dec 10, 2025 | Oct 28, 2010 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird-bin. | Oct 30, 2017 | Oct 27, 2010 |
| Mfsa2010 73 | — | Upgrade to Mozilla Firefox version 3.5.15Upgrade to Mozilla Firefox version 3.6.12 | Jun 14, 2012 | Oct 27, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.10 | Feb 3, 2012 | Oct 27, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.10Upgrade to Mozilla Thunderbird version 3.1.6 | Feb 22, 2012 | Oct 27, 2010 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-devel | Oct 16, 2024 | Oct 27, 2010 |
| Suse | — | Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-nspr-x86Upgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade orbit2-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner190Upgrade mozilla-nss-toolsUpgrade mozilla-nsprUpgrade libfreebl3-32bitUpgrade MozillaFirefox-translationsUpgrade libidlUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-translationsUpgrade libidl-32bitUpgrade mozilla-xulrunner192-develUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefoxUpgrade gconf2-x86Upgrade mozilla-nss-x86Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner191-x86Upgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner191Upgrade libidl-x86Upgrade mozilla-nssUpgrade orbit2Upgrade MozillaThunderbirdUpgrade mozilla-xulrunner190-x86Upgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-develUpgrade orbit2-x86Upgrade mozilla-xulrunner191-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner192-x86Upgrade MozillaThunderbird-translations-commonUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner190-gnomevfsUpgrade gconf2-32bitUpgrade MozillaThunderbird-develUpgrade libfreebl3-x86Upgrade libfreebl3Upgrade mozilla-xulrunner192-translations-32bitUpgrade gconf2 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade firefox-3.5Upgrade thunderbirdUpgrade firefox-3.0Upgrade xulrunner-1.9.2Upgrade abrowserUpgrade xulrunner-1.9.1 | Nov 8, 2024 | Oct 28, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub