| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | = 4.0= 4.0.1= 5.0= 5.0.1= 6.0= 6.0.1= 6.0.2= 7.0= 7.0.1 | |
| seamonkey | = 1.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.0.9= 1.1= 1.1.1= 1.1.10= 1.1.11= 1.1.12= 1.1.13= 1.1.14= 1.1.15= 1.1.16= 1.1.17= 1.1.18= 1.1.19= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.1.7= 1.1.8= 1.1.9= 1.5.0.10= 1.5.0.8= 1.5.0.9= 2.0= 2.0.1= 2.0.10= 2.0.11= 2.0.12= 2.0.13= 2.0.14= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.0.7= 2.0.8= 2.0.9= 2.1= 2.2= 2.3= 2.3.1= 2.3.2= 2.3.3= 2.4= 2.4.1= 2.5≤ 2.5 | |
| thunderbird | = 5.0= 6.0= 6.0.1= 6.0.2= 7.0= 7.0.1 |
Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to capture keystrokes entered on a web page, even when JavaScript is disabled, by using SVG animation accessKey events within that web page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free