Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an incorrect integer data type as a CSS object reference counter in the CSSValue array (aka nsCSSValue:Array) data structure, which allows remote attackers to execute arbitrary code via a large number of references to a common CSS object, leading to a counter overflow and a free of in-use memory, aka ZDI-CAN-349.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-devel-unstableUpgrade firefoxUpgrade devhelpUpgrade xulrunner-develUpgrade xulrunnerUpgrade devhelp-devel | Dec 1, 2016 | Jun 19, 2008 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner. | Oct 30, 2017 | Jun 19, 2008 |
| Mfsa2008 34 | — | Upgrade to Mozilla Firefox version 3.0.1Upgrade to Mozilla Firefox version 2.0.0.16 | Jun 14, 2012 | Jun 19, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.11 | Feb 3, 2012 | Jun 19, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.16 | Feb 22, 2012 | Jun 19, 2008 |
| Oracle_linux | — | Upgrade devhelp-develUpgrade devhelpUpgrade firefoxUpgrade yelpUpgrade xulrunner-develUpgrade xulrunner-devel-unstableUpgrade nspluginwrapperUpgrade xulrunner | Oct 16, 2024 | Jun 19, 2008 |
| Suse | — | Upgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner190-translations-64bitUpgrade MozillaThunderbirdUpgrade seamonkey-venkmanUpgrade seamonkeyUpgrade mozilla-xulrunner190-64bitUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner190-translations-32bitUpgrade seamonkey-mailUpgrade mozilla-xulrunner190-develUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade MozillaFirefoxUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade MozillaThunderbird-translationsUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-32bitUpgrade seamonkey-spellcheckerUpgrade seamonkey-ircUpgrade seamonkey-dom-inspectorUpgrade mozilla-xulrunner190-translationsUpgrade suse-release | Dec 12, 2013 | Jun 19, 2008 |
| Ubuntu | — | Upgrade thunderbirdUpgrade mozilla-thunderbirdUpgrade firefoxUpgrade firefox-3.0Upgrade xulrunner-1.9 | Nov 8, 2024 | Jun 19, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub