Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine and (1) misinterpretation of the characteristics of Namespace and QName in jsxml.c, (2) misuse of signed integers in the nsEscapeCount function in nsEscape.cpp, and (3) interaction of JavaScript garbage collection with certain use of an NPObject in the nsNPObjWrapper::GetNewOrUsed function in nsJSNPRuntime.cpp.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade devhelpUpgrade seamonkey-chatUpgrade seamonkey-develUpgrade thunderbirdUpgrade seamonkey-mailUpgrade seamonkey-dom-inspectorUpgrade firefoxUpgrade devhelp-develUpgrade seamonkey-js-debuggerUpgrade seamonkey | Dec 1, 2016 | Sep 24, 2008 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade linux-seamonkey-develUpgrade linux-firefox-develUpgrade linux-flockUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade firefoxUpgrade flockUpgrade linux-firefox | Dec 10, 2025 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade dev-libs/nss.Upgrade www-client/icecat.Upgrade www-client/firefox-bin.Upgrade www-client/firefox.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner-bin. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 42 | — | Upgrade to Mozilla Firefox version 3.0.2Upgrade to Mozilla Firefox version 2.0.0.17 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.17 | Feb 22, 2012 | Sep 24, 2008 |
| Oracle_linux | — | Upgrade nssUpgrade xulrunnerUpgrade nss-toolsUpgrade xulrunner-develUpgrade firefoxUpgrade xulrunner-devel-unstableUpgrade nss-develUpgrade devhelpUpgrade nss-pkcs11-develUpgrade devhelp-develUpgrade yelp | Oct 16, 2024 | Sep 24, 2008 |
| Suse | — | Upgrade mozillaUpgrade mozilla-xulrunner190-translations-64bitUpgrade seamonkey-dom-inspectorUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-xulrunner181-32bitUpgrade mozilla-huUpgrade mozilla-xulrunner190-64bitUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-calendarUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-xulrunner181Upgrade gecko-sdkUpgrade MozillaThunderbirdUpgrade mozilla-deatUpgrade seamonkey-mailUpgrade suse-releaseUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner181-64bitUpgrade mozilla-xulrunner190-translations-32bitUpgrade mozilla-dom-inspectorUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner181-develUpgrade seamonkeyUpgrade mozilla-xulrunner190-translationsUpgrade seamonkey-ircUpgrade mozilla-venkmanUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner190-develUpgrade mozilla-mailUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade seamonkey-spellcheckerUpgrade MozillaThunderbird-translationsUpgrade MozillaFirefoxUpgrade mozilla-xulrunner190Upgrade mozilla-develUpgrade mozilla-ircUpgrade mozilla-cs | Feb 17, 2015 | Sep 24, 2008 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade thunderbirdUpgrade firefox-3.0Upgrade mozilla-thunderbirdUpgrade firefox | Nov 8, 2024 | Sep 24, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub