Description
Mozilla Firefox before 16.0.1, Firefox ESR 10.x before 10.0.9, Thunderbird before 16.0.1, Thunderbird ESR 10.x before 10.0.9, and SeaMonkey before 2.13.1 omit a security check in the defaultValue function during the unwrapping of security wrappers, which allows remote attackers to bypass the Same Origin Policy and read the properties of a Location object, or execute arbitrary JavaScript code, via a crafted web site.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | xulrunner +2 | 10.0.8-2.el6_3 | RHSA-2012:1362, RHSA-2012:1361 |
| RHEL 5 | xulrunner +2 | 10.0.8-2.el5_8 | RHSA-2012:1362, RHSA-2012:1361 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Productivity 5 | thunderbird | 10.0.8-2.el5_8 | RHSA-2012:1362 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 | openSUSE-SU-2024:10071-1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 | openSUSE-SU-2024:10230-1 |
Advisories 4
- RHSA-2012:1362 Red Hat Security Advisory: thunderbird security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2012:1361 Red Hat Security Advisory: xulrunner security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- openSUSE-SU-2024:10230-1 MozillaThunderbird-45.5.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10071-1 MozillaFirefox-50.1.0-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- http://www.mozilla.org/security/announce/2012/mfsa2012-89.html
- 50904 third-party-advisory
- 50984 third-party-advisory
- oval:org.mitre.oval:def:16786 vdb-entry signature
- RHSA-2012:1361 vendor-advisory
- 50907 third-party-advisory
- RHSA-2012:1362 vendor-advisory
- 55318 third-party-advisory
- mozilla-location-security-bypass(79211) vdb-entry
- SUSE-SU-2012:1351 vendor-advisory
- 50964 third-party-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=720619
- 50906 third-party-advisory
- USN-1611-1 vendor-advisory