The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger memory corruption, as demonstrated by e4x/extensions/regress-410192.js.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbird | Dec 1, 2016 | Nov 13, 2008 |
| Gentoo Linux | — | Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/icecat.Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Nov 13, 2008 |
| Oracle_linux | — | Upgrade nss-develUpgrade firefoxUpgrade devhelpUpgrade xulrunner-develUpgrade yelpUpgrade nssUpgrade nss-pkcs11-develUpgrade nss-toolsUpgrade xulrunnerUpgrade xulrunner-devel-unstableUpgrade devhelp-devel | Oct 16, 2024 | Nov 13, 2008 |
| Suse | — | Upgrade mozilla-xulrunner190-32bitUpgrade seamonkey-spellcheckerUpgrade mozilla-deatUpgrade mozilla-huUpgrade mozilla-xulrunner181-l10nUpgrade epiphanyUpgrade mozilla-ircUpgrade MozillaThunderbird-translationsUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade MozillaFirefoxUpgrade epiphany-docUpgrade suse-releaseUpgrade MozillaFirefox-translationsUpgrade mozilla-mailUpgrade mozilla-develUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-venkmanUpgrade mozilla-xulrunner190Upgrade seamonkey-ircUpgrade seamonkey-dom-inspectorUpgrade epiphany-extensionsUpgrade mozilla-xulrunner190-develUpgrade mozilla-dom-inspectorUpgrade mozilla-calendarUpgrade mozilla-xulrunner181Upgrade seamonkeyUpgrade gecko-sdkUpgrade mozillaUpgrade mozilla-xulrunner181-64bitUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner190-translations-64bitUpgrade seamonkey-venkmanUpgrade mozilla-csUpgrade mozilla-xulrunner181-develUpgrade mozilla-xulrunner181-32bitUpgrade mozilla-xulrunner190-64bitUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner190-gnomevfsUpgrade epiphany-develUpgrade mozilla-xulrunner190-translations-32bitUpgrade seamonkey-mail | Feb 17, 2015 | Nov 13, 2008 |
| Ubuntu | — | Upgrade xulrunnerUpgrade thunderbirdUpgrade firefoxUpgrade firefox-3.0Upgrade seamonkeyUpgrade mozilla-thunderbirdUpgrade xulrunner-1.9 | Nov 19, 2024 | Nov 13, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub