This host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to security bypass vulnerability

Successful exploitation could allow attackers to inject scripts or bypass certain security restrictions. Impact Level: Application

Upgrade to Mozilla Firefox version 12.0 or later, For updates refer to http://www.mozilla.com/en-US/firefox/all.html Upgrade to SeaMonkey version to 2.9 or later, http://www.mozilla.org/projects/seamonkey/ Upgrade to Thunderbird version to 12.0 or later, http://www.mozilla.org/en-US/thunderbird/

The flaw is due to an error within the handling of XMLHttpRequest and WebSocket while using an IPv6 address can be exploited to bypass the same origin policy.

SeaMonkey version before 2.9 Thunderbird version 5.0 through 11.0 Mozilla Firefox version 4.x through 11.0

• http://secunia.com/advisories/48932/
• http://secunia.com/advisories/48972/
• http://securitytracker.com/id/1026971
• http://www.mozilla.org/security/announce/2012/mfsa2012-28.html

---

Updated on 2015-03-25