The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) via vectors that trigger memory corruption, related to the GetXMLEntity and FastAppendChar functions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nssUpgrade nss-develUpgrade xulrunnerUpgrade nsprUpgrade seamonkey-dom-inspectorUpgrade nss-toolsUpgrade seamonkey-nsprUpgrade nspr-develUpgrade thunderbirdUpgrade seamonkey-nspr-develUpgrade firefoxUpgrade seamonkey-chatUpgrade seamonkey-nssUpgrade seamonkey-mailUpgrade nss-pkcs11-develUpgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade seamonkey-nss-develUpgrade seamonkey-develUpgrade seamonkey-js-debuggerUpgrade seamonkey | Dec 1, 2016 | Dec 17, 2008 |
| Freebsd | — | Upgrade firefoxUpgrade thunderbirdUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade seamonkey | Dec 10, 2025 | Dec 19, 2008 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox-bin. | Oct 30, 2017 | Dec 17, 2008 |
| Mfsa2008 60 | — | Upgrade to Mozilla Firefox version 3.0.5Upgrade to Mozilla Firefox version 2.0.0.19 | Jun 14, 2012 | Dec 17, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.14 | Feb 3, 2012 | Dec 17, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.19 | Feb 22, 2012 | Dec 17, 2008 |
| Oracle_linux | — | Upgrade nspr-develUpgrade nssUpgrade nss-toolsUpgrade firefoxUpgrade xulrunnerUpgrade nsprUpgrade xulrunner-develUpgrade xulrunner-devel-unstableUpgrade nss-develUpgrade nss-pkcs11-devel | Oct 16, 2024 | Dec 17, 2008 |
| Suse | — | Upgrade MozillaFirefoxUpgrade MozillaFirefox-translations | Feb 17, 2015 | Dec 17, 2008 |
| Ubuntu | — | Upgrade abrowserUpgrade xulrunner-1.9Upgrade firefox-3.0 | Nov 8, 2024 | Dec 17, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub