| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 16.0 | 16.0 |
| seamonkey | < 2.13 | 2.13 |
| thunderbird | < 16.0 | 16.0 |
Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly perform a cast of an unspecified variable during use of the instanceof operator on a JavaScript object, which allows remote attackers to execute arbitrary code or cause a denial of service (assertion failure) via a crafted web site.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free