Total vulnerabilities in the database
Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting (XSS) protection by changing the src attribute of an IMG element to a javascript: URI.
| Software | From | Fixed in |
|---|---|---|
| mozilla / firefox | 1.5 | 1.5.0.9 |
| mozilla / firefox | 2.0 | 2.0.0.1 |
| mozilla / seamonkey | - | 1.0.7 |
| mozilla / thunderbird | - | 1.5.0.9 |
| debian / debian_linux | 3.1 | 3.1.x |
| debian / debian_linux | 4.0 | 4.0.x |
| canonical / ubuntu_linux | 6.06 | 6.06.x |
| canonical / ubuntu_linux | 6.10 | 6.10.x |
| canonical / ubuntu_linux | 5.10 | 5.10.x |