Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an incorrect integer data type as a CSS object reference counter in the CSSValue array (aka nsCSSValue:Array) data structure, which allows remote attackers to execute arbitrary code via a large number of references to a common CSS object, leading to a counter overflow and a free of in-use memory, aka ZDI-CAN-349.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade xulrunner-develUpgrade devhelp-develUpgrade firefoxUpgrade devhelp | Dec 1, 2016 | Jun 19, 2008 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird. | Oct 30, 2017 | Jun 19, 2008 |
| Mfsa2008 34 | — | Upgrade to Mozilla Firefox version 3.0.1Upgrade to Mozilla Firefox version 2.0.0.16 | Jun 14, 2012 | Jun 19, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.11 | Feb 3, 2012 | Jun 19, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.16 | Feb 22, 2012 | Jun 19, 2008 |
| Oracle_linux | — | Upgrade devhelpUpgrade firefoxUpgrade devhelp-develUpgrade yelpUpgrade xulrunner-develUpgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade nspluginwrapper | Oct 16, 2024 | Jun 19, 2008 |
| Suse | — | Upgrade seamonkey-dom-inspectorUpgrade suse-releaseUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade MozillaThunderbird-translationsUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-xulrunner190-32bitUpgrade seamonkey-ircUpgrade seamonkey-spellcheckerUpgrade mozilla-xulrunner190-translationsUpgrade MozillaFirefox-translationsUpgrade mozillathunderbirdUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner190-develUpgrade mozilla-xulrunner190-translations-32bitUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner190-64bitUpgrade seamonkey-mailUpgrade mozillafirefoxUpgrade seamonkeyUpgrade mozilla-xulrunner190-translations-64bitUpgrade seamonkey-venkman | Dec 12, 2013 | Jun 19, 2008 |
| Ubuntu | — | Upgrade mozilla-thunderbirdUpgrade thunderbirdUpgrade firefox-3.0Upgrade xulrunner-1.9Upgrade firefox | Nov 8, 2024 | Jun 19, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub