Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-mailUpgrade seamonkey-dom-inspectorUpgrade seamonkeyUpgrade seamonkey-chatUpgrade seamonkey-develUpgrade thunderbirdUpgrade seamonkey-js-debugger | Dec 1, 2016 | Sep 24, 2008 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade linux-firefoxUpgrade linux-thunderbirdUpgrade linux-seamonkey-develUpgrade linux-flockUpgrade flockUpgrade thunderbirdUpgrade linux-firefox-develUpgrade seamonkeyUpgrade firefox | Dec 10, 2025 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird.Upgrade dev-libs/nss.Upgrade www-client/seamonkey-bin.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 37 | — | Upgrade to Mozilla Firefox version 2.0.0.17 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.17 | Feb 22, 2012 | Sep 24, 2008 |
| Suse | — | Upgrade mozilla-develUpgrade mozilla-huUpgrade seamonkey-spellcheckerUpgrade mozilla-mailUpgrade mozilla-ircUpgrade MozillaThunderbird-develUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner181-32bitUpgrade mozilla-csUpgrade seamonkey-mailUpgrade seamonkey-ircUpgrade mozilla-xulrunner181Upgrade mozilla-xulrunner181-develUpgrade mozilla-venkmanUpgrade gecko-sdkUpgrade MozillaThunderbird-translationsUpgrade MozillaFirefox-translationsUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner181-64bitUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-dom-inspectorUpgrade mozillaUpgrade mozilla-deatUpgrade mozilla-calendarUpgrade suse-releaseUpgrade MozillaFirefoxUpgrade seamonkeyUpgrade seamonkey-dom-inspector | Feb 17, 2015 | Sep 24, 2008 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade firefoxUpgrade firefox-3.0 | Nov 8, 2024 | Sep 24, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub