| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 17.0.3< 19.0 | 17.0.319.0 |
| seamonkey | < 2.16 | 2.16 |
| thunderbird | < 17.0.3 | 17.0.3 |
| thunderbird esr | < 17.0.3 | 17.0.3 |
Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent JavaScript workers from reading the browser-profile directory name, which has unspecified impact and remote attack vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free