Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-dom-inspectorUpgrade seamonkeyUpgrade thunderbirdUpgrade seamonkey-develUpgrade seamonkey-chatUpgrade seamonkey-js-debuggerUpgrade seamonkey-mail | Dec 1, 2016 | Sep 24, 2008 |
| Freebsd | — | Upgrade flockUpgrade seamonkeyUpgrade thunderbirdUpgrade firefoxUpgrade linux-firefox-develUpgrade linux-thunderbirdUpgrade linux-seamonkey-develUpgrade linux-flockUpgrade linux-seamonkeyUpgrade linux-firefox | Dec 10, 2025 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade www-client/icecat.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 37 | — | Upgrade to Mozilla Firefox version 2.0.0.17 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.17 | Feb 22, 2012 | Sep 24, 2008 |
| Suse | — | Upgrade suse-releaseUpgrade mozillaUpgrade gecko-sdkUpgrade mozilla-deatUpgrade seamonkey-dom-inspectorUpgrade seamonkeyUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-dom-inspectorUpgrade mozilla-venkmanUpgrade mozilla-calendarUpgrade mozilla-xulrunner181-64bitUpgrade mozilla-xulrunner181-develUpgrade MozillaThunderbird-translationsUpgrade mozillathunderbirdUpgrade mozilla-xulrunner181Upgrade mozilla-mailUpgrade mozilla-huUpgrade seamonkey-venkmanUpgrade mozilla-ircUpgrade seamonkey-ircUpgrade mozillafirefoxUpgrade mozilla-develUpgrade mozilla-csUpgrade seamonkey-spellcheckerUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner181-32bitUpgrade seamonkey-mail | Feb 17, 2015 | Sep 24, 2008 |
| Ubuntu | — | Upgrade firefoxUpgrade firefox-3.0Upgrade xulrunner-1.9 | Nov 8, 2024 | Sep 24, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub