| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | = 1.5= 1.5.0.1= 1.5.0.10= 1.5.0.11= 1.5.0.2= 1.5.0.3= 1.5.0.4= 1.5.0.5= 1.5.0.6= 1.5.0.7= 1.5.0.8= 1.5.0.9= 2.0= 2.0.0.1= 2.0.0.2= 2.0.0.3 | |
| seamonkey | = 1.0.9= 1.1.2 |
Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to bypass the same-origin policy and conduct cross-site scripting (XSS) and other attacks by using the addEventListener method to add an event listener for a site, which is executed in the context of that site.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free