The XPConnect component in Mozilla Firefox before 2.0.0.17 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chrome privileges via vectors related to a SCRIPT element.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-dom-inspectorUpgrade thunderbirdUpgrade seamonkey-chatUpgrade seamonkeyUpgrade seamonkey-js-debuggerUpgrade seamonkey-develUpgrade seamonkey-mail | Dec 1, 2016 | Sep 24, 2008 |
| Freebsd | — | Upgrade seamonkeyUpgrade linux-firefoxUpgrade linux-flockUpgrade thunderbirdUpgrade firefoxUpgrade flockUpgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade linux-seamonkey-develUpgrade linux-firefox-devel | Dec 10, 2025 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/icecat.Upgrade dev-libs/nss.Upgrade www-client/firefox.Upgrade net-libs/xulrunner. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 41 | — | Upgrade to Mozilla Firefox version 2.0.0.17Upgrade to Mozilla Firefox version 3.0.2 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.17 | Feb 22, 2012 | Sep 24, 2008 |
| Suse | — | Upgrade seamonkeyUpgrade gecko-sdkUpgrade seamonkey-dom-inspectorUpgrade suse-releaseUpgrade mozilla-deatUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner181-64bitUpgrade mozilla-xulrunner190-64bitUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-translations-32bitUpgrade mozilla-dom-inspectorUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-csUpgrade mozilla-develUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner190-develUpgrade mozilla-venkmanUpgrade MozillaFirefoxUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner181-develUpgrade mozilla-xulrunner181-32bitUpgrade mozilla-calendarUpgrade mozilla-mailUpgrade seamonkey-venkmanUpgrade mozilla-ircUpgrade seamonkey-mailUpgrade seamonkey-ircUpgrade mozilla-xulrunner190-gnomevfsUpgrade MozillaThunderbird-translationsUpgrade mozilla-xulrunner181Upgrade mozilla-xulrunner190-translations-64bitUpgrade MozillaThunderbird-develUpgrade mozilla-huUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozillaUpgrade seamonkey-spellchecker | Feb 17, 2015 | Sep 24, 2008 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefoxUpgrade xulrunner-1.9Upgrade firefox-3.0Upgrade mozilla-thunderbird | Nov 8, 2024 | Sep 24, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub