Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors involving "double frame construction."
CVSS Details
- CVSS 3.1 Base Score: 8.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade xulrunnerUpgrade firefox | Dec 1, 2016 | Jun 12, 2009 |
| Freebsd | — | Upgrade thunderbirdUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade linux-firefoxUpgrade linux-firefox-develUpgrade linux-thunderbirdUpgrade firefox | Dec 10, 2025 | Jun 12, 2009 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade www-client/seamonkey.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/icecat. | Oct 30, 2017 | Jun 12, 2009 |
| Mfsa2009 24 | — | Upgrade to Mozilla Firefox version 3.0.11 | Jun 14, 2012 | Jun 12, 2009 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.17 | Feb 3, 2012 | Jun 12, 2009 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.22 | Feb 22, 2012 | Jun 12, 2009 |
| Oracle_linux | — | Upgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade xulrunnerUpgrade firefox | Oct 16, 2024 | Jun 12, 2009 |
| Suse | — | Upgrade mozilla-xulrunner192-x86Upgrade libidlUpgrade libfreebl3-x86Upgrade mozilla-nss-x86Upgrade gconf2-32bitUpgrade mozilla-nss-toolsUpgrade orbit2-x86Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner191Upgrade libfreebl3-32bitUpgrade gconf2-x86Upgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner191-translationsUpgrade libidl-x86Upgrade gconf2Upgrade mozilla-nspr-x86Upgrade orbit2Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner192Upgrade MozillaFirefoxUpgrade mozilla-nssUpgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefox-translationsUpgrade orbit2-32bitUpgrade mozilla-xulrunner191-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner190-translationsUpgrade mozilla-nsprUpgrade libidl-32bitUpgrade libfreebl3Upgrade mozilla-xulrunner190Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner190-gnomevfs | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade xulrunner-1.9Upgrade firefox-3.0 | Nov 8, 2024 | Jun 12, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub