The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLookup, and (3) MirrorWrappedNativeParent and js_LockGCThingRT.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-nspr-develUpgrade thunderbirdUpgrade seamonkey-nssUpgrade seamonkeyUpgrade seamonkey-nss-develUpgrade seamonkey-mailUpgrade seamonkey-js-debuggerUpgrade xulrunnerUpgrade firefoxUpgrade xulrunner-develUpgrade seamonkey-dom-inspectorUpgrade xulrunner-devel-unstableUpgrade seamonkey-nsprUpgrade seamonkey-chatUpgrade seamonkey-devel | Dec 1, 2016 | Jul 22, 2009 |
| Gentoo Linux | — | Upgrade www-client/icecat.Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Jul 22, 2009 |
| Mfsa2009 34 | — | Upgrade to Mozilla Firefox version 3.0.12Upgrade to Mozilla Firefox version 3.5 | Jun 14, 2012 | Jul 22, 2009 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade xulrunner-devel-unstableUpgrade firefox | Oct 16, 2024 | Jul 22, 2009 |
| Suse | — | Upgrade orbit2-x86Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefoxUpgrade mozilla-xulrunner190-translationsUpgrade libfreebl3-x86Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nss-x86Upgrade libidl-x86Upgrade orbit2-32bitUpgrade mozilla-xulrunner191Upgrade libidlUpgrade mozilla-xulrunner190-gnomevfsUpgrade orbit2Upgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner191-translationsUpgrade gconf2Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner191-32bitUpgrade gconf2-32bitUpgrade libidl-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade libfreebl3Upgrade mozilla-nsprUpgrade mozilla-xulrunner192-gnomeUpgrade gconf2-x86Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner190Upgrade mozilla-nssUpgrade mozilla-xulrunner190-x86Upgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner191-x86Upgrade mozilla-nspr-x86Upgrade mozilla-xulrunner192Upgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-32bit | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade firefox-3.0Upgrade abrowser | Nov 8, 2024 | Jul 22, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub