CVE-2009-1307: The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not pr...

Security readout for executives and security teams

This is an old Mozilla same-origin policy bypass affecting Firefox before 3.0.9 and also Thunderbird and SeaMonkey. Malicious content could make restricted content appear trusted, enabling access to sites or Flash local shared data that should have been blocked. Exposure is most plausible on legacy desktops, kiosks, embedded systems, or old Linux distributions still running affected Mozilla packages from 2009. Current supported Mozilla versions are unlikely to be affected, but the bundle does not provide full fixed-version details for every product. Treat this as a legacy exposure cleanup item. It is not proven actively exploited in the provided sources, but affected systems are obsolete and can weaken browser trust boundaries if still used for web or mail access. Mitigation focus: Upgrade Firefox to 3.0.9 or later where applicable.; Update Thunderbird and SeaMonkey using vendor or distribution advisories.; Retire unsupported Mozilla-era browser and mail clients from production systems..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.