nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying properties of a file input element while it is still being initialized, then using the blur method to access uninitialized memory.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-chatUpgrade nssUpgrade seamonkey-develUpgrade seamonkey-mailUpgrade seamonkey-nssUpgrade xulrunner-develUpgrade seamonkey-nspr-develUpgrade xulrunnerUpgrade seamonkey-nsprUpgrade seamonkey-nss-develUpgrade seamonkey-js-debuggerUpgrade xulrunner-devel-unstableUpgrade nss-pkcs11-develUpgrade nss-develUpgrade yelpUpgrade devhelpUpgrade devhelp-develUpgrade seamonkeyUpgrade seamonkey-dom-inspectorUpgrade thunderbirdUpgrade nss-toolsUpgrade firefox | Dec 1, 2016 | Nov 13, 2008 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade linux-firefoxUpgrade firefox | Dec 10, 2025 | Nov 13, 2008 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade www-client/icecat.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey. | Oct 30, 2017 | Nov 13, 2008 |
| Mfsa2008 55 | — | Upgrade to Mozilla Firefox version 2.0.0.18Upgrade to Mozilla Firefox version 3.0.4 | Jun 14, 2012 | Nov 13, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.13 | Feb 3, 2012 | Nov 13, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.18 | Feb 22, 2012 | Nov 13, 2008 |
| Oracle_linux | — | Upgrade devhelpUpgrade nssUpgrade xulrunner-develUpgrade nss-develUpgrade devhelp-develUpgrade yelpUpgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade nss-pkcs11-develUpgrade nss-toolsUpgrade firefox | Oct 16, 2024 | Nov 13, 2008 |
| Suse | — | Upgrade mozilla-xulrunner181-64bitUpgrade seamonkey-spellcheckerUpgrade mozilla-xulrunner181-32bitUpgrade mozilla-venkmanUpgrade mozilla-xulrunner190-64bitUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-deatUpgrade suse-releaseUpgrade epiphanyUpgrade epiphany-docUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-xulrunner190-develUpgrade mozilla-xulrunner190-translations-32bitUpgrade gecko-sdkUpgrade mozilla-dom-inspectorUpgrade seamonkey-dom-inspectorUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner181-develUpgrade epiphany-develUpgrade mozilla-xulrunner190Upgrade seamonkeyUpgrade mozilla-develUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-ircUpgrade epiphany-extensionsUpgrade MozillaFirefoxUpgrade MozillaThunderbirdUpgrade mozilla-csUpgrade mozilla-huUpgrade mozilla-xulrunner181Upgrade mozilla-calendarUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade seamonkey-mailUpgrade mozilla-mailUpgrade MozillaThunderbird-translationsUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner190-gnomevfsUpgrade MozillaThunderbird-develUpgrade mozillaUpgrade mozilla-xulrunner190-translations-64bitUpgrade seamonkey-irc | Feb 17, 2015 | Nov 13, 2008 |
| Ubuntu | — | Upgrade thunderbirdUpgrade xulrunner-1.9Upgrade firefoxUpgrade mozilla-thunderbirdUpgrade firefox-3.0Upgrade abrowser | Nov 8, 2024 | Nov 13, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub