Mozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a watch function and an __defineSetter__ function, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted document, related to a certain pointer misinterpretation.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade firefoxUpgrade xulrunner | Dec 1, 2016 | Jul 22, 2009 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade www-client/icecat.Upgrade www-client/seamonkey-bin.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner-bin. | Oct 30, 2017 | Jul 22, 2009 |
| Mfsa2009 37 | — | Upgrade to Mozilla Firefox version 3.0.12Upgrade to Mozilla Firefox version 3.5 | Jun 14, 2012 | Jul 22, 2009 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Jul 22, 2009 |
| Suse | — | Upgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-gnomeUpgrade libidl-x86Upgrade libidl-32bitUpgrade orbit2-32bitUpgrade libfreebl3-x86Upgrade mozilla-nssUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner191-x86Upgrade libfreebl3-32bitUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade orbit2-x86Upgrade libfreebl3Upgrade gconf2-x86Upgrade mozilla-xulrunner192Upgrade mozilla-nss-x86Upgrade mozilla-nsprUpgrade gconf2-32bitUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner190-translationsUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner190Upgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nss-toolsUpgrade gconf2Upgrade libidlUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-nspr-x86Upgrade mozilla-xulrunner190-32bitUpgrade orbit2Upgrade mozilla-xulrunner191Upgrade MozillaFirefox | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade xulrunner-1.9Upgrade abrowser | Nov 8, 2024 | Jul 22, 2009 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub