Mozilla Firefox before 15.0 does not properly restrict navigation to the about:newtab page, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers creation of a new tab and then a new window.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Firefox | Mozilla | * | 14.0 (including) |
| Firefox | Mozilla | 1.0 (including) | 1.0 (including) |
| Firefox | Mozilla | 1.0-preview_release (including) | 1.0-preview_release (including) |
| Firefox | Mozilla | 1.0.1 (including) | 1.0.1 (including) |
| Firefox | Mozilla | 1.0.2 (including) | 1.0.2 (including) |
| Firefox | Mozilla | 1.0.3 (including) | 1.0.3 (including) |
| Firefox | Mozilla | 1.0.4 (including) | 1.0.4 (including) |
| Firefox | Mozilla | 1.0.5 (including) | 1.0.5 (including) |
| Firefox | Mozilla | 1.0.6 (including) | 1.0.6 (including) |
| Firefox | Mozilla | 1.0.7 (including) | 1.0.7 (including) |
| Firefox | Mozilla | 1.0.8 (including) | 1.0.8 (including) |
| Firefox | Mozilla | 1.4.1 (including) | 1.4.1 (including) |
| Firefox | Mozilla | 1.5 (including) | 1.5 (including) |
| Firefox | Mozilla | 1.5-beta1 (including) | 1.5-beta1 (including) |
| Firefox | Mozilla | 1.5-beta2 (including) | 1.5-beta2 (including) |
| Firefox | Mozilla | 1.5.0.1 (including) | 1.5.0.1 (including) |
| Firefox | Mozilla | 1.5.0.2 (including) | 1.5.0.2 (including) |
| Firefox | Mozilla | 1.5.0.3 (including) | 1.5.0.3 (including) |
| Firefox | Mozilla | 1.5.0.4 (including) | 1.5.0.4 (including) |
| Firefox | Mozilla | 1.5.0.5 (including) | 1.5.0.5 (including) |
| Firefox | Mozilla | 1.5.0.6 (including) | 1.5.0.6 (including) |
| Firefox | Mozilla | 1.5.0.7 (including) | 1.5.0.7 (including) |
| Firefox | Mozilla | 1.5.0.8 (including) | 1.5.0.8 (including) |
| Firefox | Mozilla | 1.5.0.9 (including) | 1.5.0.9 (including) |
| Firefox | Mozilla | 1.5.0.10 (including) | 1.5.0.10 (including) |
| Firefox | Mozilla | 1.5.0.11 (including) | 1.5.0.11 (including) |
| Firefox | Mozilla | 1.5.0.12 (including) | 1.5.0.12 (including) |
| Firefox | Mozilla | 1.5.1 (including) | 1.5.1 (including) |
| Firefox | Mozilla | 1.5.2 (including) | 1.5.2 (including) |
| Firefox | Mozilla | 1.5.3 (including) | 1.5.3 (including) |
| Firefox | Mozilla | 1.5.4 (including) | 1.5.4 (including) |
| Firefox | Mozilla | 1.5.5 (including) | 1.5.5 (including) |
| Firefox | Mozilla | 1.5.6 (including) | 1.5.6 (including) |
| Firefox | Mozilla | 1.5.7 (including) | 1.5.7 (including) |
| Firefox | Mozilla | 1.5.8 (including) | 1.5.8 (including) |
| Firefox | Mozilla | 1.8 (including) | 1.8 (including) |
| Firefox | Mozilla | 2.0 (including) | 2.0 (including) |
| Firefox | Mozilla | 2.0.0.1 (including) | 2.0.0.1 (including) |
| Firefox | Mozilla | 2.0.0.2 (including) | 2.0.0.2 (including) |
| Firefox | Mozilla | 2.0.0.3 (including) | 2.0.0.3 (including) |
| Firefox | Mozilla | 2.0.0.4 (including) | 2.0.0.4 (including) |
| Firefox | Mozilla | 2.0.0.5 (including) | 2.0.0.5 (including) |
| Firefox | Mozilla | 2.0.0.6 (including) | 2.0.0.6 (including) |
| Firefox | Mozilla | 2.0.0.7 (including) | 2.0.0.7 (including) |
| Firefox | Mozilla | 2.0.0.8 (including) | 2.0.0.8 (including) |
| Firefox | Mozilla | 2.0.0.9 (including) | 2.0.0.9 (including) |
| Firefox | Mozilla | 2.0.0.10 (including) | 2.0.0.10 (including) |
| Firefox | Mozilla | 2.0.0.11 (including) | 2.0.0.11 (including) |
| Firefox | Mozilla | 2.0.0.12 (including) | 2.0.0.12 (including) |
| Firefox | Mozilla | 2.0.0.13 (including) | 2.0.0.13 (including) |
| Firefox | Mozilla | 2.0.0.14 (including) | 2.0.0.14 (including) |
| Firefox | Mozilla | 2.0.0.15 (including) | 2.0.0.15 (including) |
| Firefox | Mozilla | 2.0.0.16 (including) | 2.0.0.16 (including) |
| Firefox | Mozilla | 2.0.0.17 (including) | 2.0.0.17 (including) |
| Firefox | Mozilla | 2.0.0.18 (including) | 2.0.0.18 (including) |
| Firefox | Mozilla | 2.0.0.19 (including) | 2.0.0.19 (including) |
| Firefox | Mozilla | 2.0.0.20 (including) | 2.0.0.20 (including) |
| Firefox | Mozilla | 3.0 (including) | 3.0 (including) |
| Firefox | Mozilla | 3.0.1 (including) | 3.0.1 (including) |
| Firefox | Mozilla | 3.0.2 (including) | 3.0.2 (including) |
| Firefox | Mozilla | 3.0.3 (including) | 3.0.3 (including) |
| Firefox | Mozilla | 3.0.4 (including) | 3.0.4 (including) |
| Firefox | Mozilla | 3.0.5 (including) | 3.0.5 (including) |
| Firefox | Mozilla | 3.0.6 (including) | 3.0.6 (including) |
| Firefox | Mozilla | 3.0.7 (including) | 3.0.7 (including) |
| Firefox | Mozilla | 3.0.8 (including) | 3.0.8 (including) |
| Firefox | Mozilla | 3.0.9 (including) | 3.0.9 (including) |
| Firefox | Mozilla | 3.0.10 (including) | 3.0.10 (including) |
| Firefox | Mozilla | 3.0.11 (including) | 3.0.11 (including) |
| Firefox | Mozilla | 3.0.12 (including) | 3.0.12 (including) |
| Firefox | Mozilla | 3.0.13 (including) | 3.0.13 (including) |
| Firefox | Mozilla | 3.0.14 (including) | 3.0.14 (including) |
| Firefox | Mozilla | 3.0.15 (including) | 3.0.15 (including) |
| Firefox | Mozilla | 3.0.16 (including) | 3.0.16 (including) |
| Firefox | Mozilla | 3.0.17 (including) | 3.0.17 (including) |
| Firefox | Mozilla | 3.5 (including) | 3.5 (including) |
| Firefox | Mozilla | 3.5.1 (including) | 3.5.1 (including) |
| Firefox | Mozilla | 3.5.2 (including) | 3.5.2 (including) |
| Firefox | Mozilla | 3.5.3 (including) | 3.5.3 (including) |
| Firefox | Mozilla | 3.5.4 (including) | 3.5.4 (including) |
| Firefox | Mozilla | 3.5.5 (including) | 3.5.5 (including) |
| Firefox | Mozilla | 3.5.6 (including) | 3.5.6 (including) |
| Firefox | Mozilla | 3.5.7 (including) | 3.5.7 (including) |
| Firefox | Mozilla | 3.5.8 (including) | 3.5.8 (including) |
| Firefox | Mozilla | 3.5.9 (including) | 3.5.9 (including) |
| Firefox | Mozilla | 3.5.10 (including) | 3.5.10 (including) |
| Firefox | Mozilla | 3.5.11 (including) | 3.5.11 (including) |
| Firefox | Mozilla | 3.5.12 (including) | 3.5.12 (including) |
| Firefox | Mozilla | 3.5.13 (including) | 3.5.13 (including) |
| Firefox | Mozilla | 3.5.14 (including) | 3.5.14 (including) |
| Firefox | Mozilla | 3.5.15 (including) | 3.5.15 (including) |
| Firefox | Mozilla | 3.6 (including) | 3.6 (including) |
| Firefox | Mozilla | 3.6.2 (including) | 3.6.2 (including) |
| Firefox | Mozilla | 3.6.3 (including) | 3.6.3 (including) |
| Firefox | Mozilla | 3.6.4 (including) | 3.6.4 (including) |
| Firefox | Mozilla | 3.6.6 (including) | 3.6.6 (including) |
| Firefox | Mozilla | 3.6.7 (including) | 3.6.7 (including) |
| Firefox | Mozilla | 3.6.8 (including) | 3.6.8 (including) |
| Firefox | Mozilla | 3.6.9 (including) | 3.6.9 (including) |
| Firefox | Mozilla | 3.6.10 (including) | 3.6.10 (including) |
| Firefox | Mozilla | 3.6.11 (including) | 3.6.11 (including) |
| Firefox | Mozilla | 3.6.12 (including) | 3.6.12 (including) |
| Firefox | Mozilla | 3.6.13 (including) | 3.6.13 (including) |
| Firefox | Mozilla | 3.6.14 (including) | 3.6.14 (including) |
| Firefox | Mozilla | 3.6.15 (including) | 3.6.15 (including) |
| Firefox | Mozilla | 3.6.16 (including) | 3.6.16 (including) |
| Firefox | Mozilla | 3.6.17 (including) | 3.6.17 (including) |
| Firefox | Mozilla | 3.6.18 (including) | 3.6.18 (including) |
| Firefox | Mozilla | 3.6.19 (including) | 3.6.19 (including) |
| Firefox | Mozilla | 3.6.20 (including) | 3.6.20 (including) |
| Firefox | Mozilla | 3.6.21 (including) | 3.6.21 (including) |
| Firefox | Mozilla | 3.6.22 (including) | 3.6.22 (including) |
| Firefox | Mozilla | 3.6.23 (including) | 3.6.23 (including) |
| Firefox | Mozilla | 3.6.24 (including) | 3.6.24 (including) |
| Firefox | Mozilla | 3.6.25 (including) | 3.6.25 (including) |
| Firefox | Mozilla | 4.0 (including) | 4.0 (including) |
| Firefox | Mozilla | 4.0-beta1 (including) | 4.0-beta1 (including) |
| Firefox | Mozilla | 4.0-beta10 (including) | 4.0-beta10 (including) |
| Firefox | Mozilla | 4.0-beta11 (including) | 4.0-beta11 (including) |
| Firefox | Mozilla | 4.0-beta12 (including) | 4.0-beta12 (including) |
| Firefox | Mozilla | 4.0-beta2 (including) | 4.0-beta2 (including) |
| Firefox | Mozilla | 4.0-beta3 (including) | 4.0-beta3 (including) |
| Firefox | Mozilla | 4.0-beta4 (including) | 4.0-beta4 (including) |
| Firefox | Mozilla | 4.0-beta5 (including) | 4.0-beta5 (including) |
| Firefox | Mozilla | 4.0-beta6 (including) | 4.0-beta6 (including) |
| Firefox | Mozilla | 4.0-beta7 (including) | 4.0-beta7 (including) |
| Firefox | Mozilla | 4.0-beta8 (including) | 4.0-beta8 (including) |
| Firefox | Mozilla | 4.0-beta9 (including) | 4.0-beta9 (including) |
| Firefox | Mozilla | 4.0.1 (including) | 4.0.1 (including) |
| Firefox | Mozilla | 5.0 (including) | 5.0 (including) |
| Firefox | Mozilla | 5.0.1 (including) | 5.0.1 (including) |
| Firefox | Mozilla | 6.0 (including) | 6.0 (including) |
| Firefox | Mozilla | 6.0.1 (including) | 6.0.1 (including) |
| Firefox | Mozilla | 6.0.2 (including) | 6.0.2 (including) |
| Firefox | Mozilla | 7.0 (including) | 7.0 (including) |
| Firefox | Mozilla | 7.0.1 (including) | 7.0.1 (including) |
| Firefox | Mozilla | 8.0 (including) | 8.0 (including) |
| Firefox | Mozilla | 8.0.1 (including) | 8.0.1 (including) |
| Firefox | Mozilla | 9.0 (including) | 9.0 (including) |
| Firefox | Mozilla | 9.0.1 (including) | 9.0.1 (including) |
| Firefox | Mozilla | 10.0 (including) | 10.0 (including) |
| Firefox | Mozilla | 10.0.1 (including) | 10.0.1 (including) |
| Firefox | Mozilla | 10.0.2 (including) | 10.0.2 (including) |
| Firefox | Mozilla | 11.0 (including) | 11.0 (including) |
| Firefox | Mozilla | 12.0 (including) | 12.0 (including) |
| Firefox | Mozilla | 12.0-beta6 (including) | 12.0-beta6 (including) |
| Firefox | Mozilla | 13.0 (including) | 13.0 (including) |
| Firefox | Ubuntu | devel | * |
| Firefox | Ubuntu | hardy | * |
| Firefox | Ubuntu | lucid | * |
| Firefox | Ubuntu | natty | * |
| Firefox | Ubuntu | oneiric | * |
| Firefox | Ubuntu | precise | * |
| Firefox | Ubuntu | quantal | * |
| Firefox | Ubuntu | raring | * |
| Firefox | Ubuntu | saucy | * |
| Firefox | Ubuntu | upstream | * |
| Seamonkey | Ubuntu | hardy | * |
| Seamonkey | Ubuntu | lucid | * |
| Seamonkey | Ubuntu | natty | * |
| Seamonkey | Ubuntu | oneiric | * |
| Thunderbird | Ubuntu | hardy | * |
| Xulrunner-1.9.2 | Ubuntu | hardy | * |
| Xulrunner-1.9.2 | Ubuntu | lucid | * |
| Xulrunner-1.9.2 | Ubuntu | natty | * |
| Xulrunner-2.0 | Ubuntu | natty | * |