The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade xulrunner-develUpgrade xulrunnerUpgrade xulrunner-devel-unstable | Dec 1, 2016 | Apr 22, 2009 |
| Freebsd | — | Upgrade thunderbirdUpgrade firefoxUpgrade seamonkeyUpgrade linux-seamonkey-develUpgrade linux-firefox-develUpgrade linux-firefoxUpgrade linux-thunderbirdUpgrade linux-seamonkey | Dec 10, 2025 | Apr 22, 2009 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade www-client/seamonkey.Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner.Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Apr 22, 2009 |
| Mfsa2009 14 | — | Upgrade to Mozilla Firefox version 3.0.9 | Jun 14, 2012 | Apr 22, 2009 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.16 | Feb 3, 2012 | Apr 22, 2009 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.22 | Feb 22, 2012 | Apr 22, 2009 |
| Oracle_linux | — | Upgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Apr 22, 2009 |
| Suse | — | Upgrade mozilla-nspr-x86Upgrade libfreebl3-32bitUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner190Upgrade orbit2-32bitUpgrade libidlUpgrade MozillaFirefox-translations-commonUpgrade gconf2-x86Upgrade MozillaFirefoxUpgrade mozilla-nss-toolsUpgrade mozilla-nss-x86Upgrade libidl-32bitUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nss-32bitUpgrade mozilla-nsprUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner190-translationsUpgrade libfreebl3Upgrade orbit2-x86Upgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-x86Upgrade MozillaFirefox-branding-SLEDUpgrade gconf2-32bitUpgrade mozilla-nssUpgrade libidl-x86Upgrade orbit2Upgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner191-32bitUpgrade gconf2Upgrade mozilla-xulrunner191-translationsUpgrade MozillaFirefox-translations-otherUpgrade libfreebl3-x86Upgrade mozilla-xulrunner192 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade xulrunner-1.9Upgrade abrowserUpgrade firefox-3.0 | Nov 8, 2024 | Apr 22, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub