Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-js-debuggerUpgrade nss-pkcs11-develUpgrade seamonkey-nss-develUpgrade yelpUpgrade seamonkey-mailUpgrade seamonkeyUpgrade devhelpUpgrade xulrunner-devel-unstableUpgrade seamonkey-develUpgrade devhelp-develUpgrade xulrunner-develUpgrade seamonkey-nspr-develUpgrade seamonkey-nsprUpgrade seamonkey-chatUpgrade nss-toolsUpgrade nssUpgrade seamonkey-dom-inspectorUpgrade seamonkey-nssUpgrade firefoxUpgrade xulrunnerUpgrade nss-develUpgrade thunderbird | Dec 1, 2016 | Nov 13, 2008 |
| Freebsd | — | Upgrade seamonkeyUpgrade thunderbirdUpgrade linux-firefoxUpgrade firefoxUpgrade linux-seamonkeyUpgrade linux-thunderbird | Dec 10, 2025 | Nov 13, 2008 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Nov 13, 2008 |
| Mfsa2008 52 | — | Upgrade to Mozilla Firefox version 2.0.0.18Upgrade to Mozilla Firefox version 3.0.4 | Jun 14, 2012 | Nov 13, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.13 | Feb 3, 2012 | Nov 13, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.18 | Feb 22, 2012 | Nov 13, 2008 |
| Oracle_linux | — | Upgrade nss-pkcs11-develUpgrade yelpUpgrade devhelpUpgrade nss-toolsUpgrade nssUpgrade xulrunner-devel-unstableUpgrade nss-develUpgrade xulrunnerUpgrade devhelp-develUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Nov 13, 2008 |
| Suse | — | Upgrade seamonkey-ircUpgrade suse-releaseUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-develUpgrade seamonkey-dom-inspectorUpgrade epiphany-extensionsUpgrade mozilla-xulrunner190-32bitUpgrade seamonkey-spellcheckerUpgrade mozilla-xulrunner190-develUpgrade mozilla-deatUpgrade mozilla-ircUpgrade mozilla-xulrunner190-64bitUpgrade mozilla-mailUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-xulrunner190Upgrade mozilla-venkmanUpgrade mozilla-xulrunner190-translationsUpgrade MozillaFirefox-translationsUpgrade gecko-sdkUpgrade MozillaThunderbird-translationsUpgrade MozillaFirefoxUpgrade mozilla-huUpgrade epiphany-docUpgrade epiphany-develUpgrade mozilla-xulrunner181-32bitUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner181-64bitUpgrade MozillaThunderbirdUpgrade mozilla-dom-inspectorUpgrade mozilla-xulrunner181Upgrade mozillaUpgrade seamonkeyUpgrade epiphanyUpgrade mozilla-csUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade seamonkey-mailUpgrade mozilla-calendarUpgrade mozilla-xulrunner190-translations-64bitUpgrade mozilla-xulrunner190-translations-32bitUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner181-devel | Feb 17, 2015 | Nov 13, 2008 |
| Ubuntu | — | Upgrade mozilla-thunderbirdUpgrade xulrunner-1.9Upgrade firefoxUpgrade firefox-3.0Upgrade abrowserUpgrade thunderbird | Nov 8, 2024 | Nov 13, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub