Codycrews00

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 25.0 Mozilla Firefox ESR versions 24.x prior to 24.1 **Description** The issue allows remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges by using an IFRAME element within an embedded PDF object. This is due to the improper handling of the appending of an IFRAME element by PDF.js in Mozilla Firefox. **Recommendations** For Mozilla Firefox versions prior to 25.0, update to version 25.0 or later. For Mozilla Firefox ESR versions 24.x prior to 24.1, update to version 24.1 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 20.0 Firefox ESR 17.x versions prior to 17.0.5 Thunderbird versions prior to 17.0.5 Thunderbird ESR 17.x versions prior to 17.0.5 SeaMonkey versions prior to 2.17 **Description** The issue allows remote attackers to bypass the Same Origin Policy or possibly execute arbitrary JavaScript code with chrome privileges via a crafted web site. This is due to the System Only Wrapper (SOW) implementation not preventing the use of the `cloneNode` method for cloning a protected node. **Recommendations** For Mozilla Firefox versions prior to 20.0, update to version 20.0 or later. For Firefox ESR 17.x versions prior to 17.0.5, update to version 17.0.5 or later. For Thunderbird versions prior to 17.0.5, update to version 17.0.5 or later. For Thunderbird ESR 17.x versions prior to 17.0.5, update to version 17.0.5 or later. For SeaMonkey versions prior to 2.17, update to version 2.17 or later.