Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade nsprUpgrade nspr-devel | Dec 1, 2016 | Oct 29, 2009 |
| Freebsd | — | Upgrade firefoxUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade seamonkey | Dec 10, 2025 | Oct 28, 2009 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird. | Oct 30, 2017 | Oct 29, 2009 |
| Mfsa2009 55 | — | Upgrade to Mozilla Firefox version 3.5.4Upgrade to Mozilla Firefox version 3.0.15 | Jun 14, 2012 | Oct 29, 2009 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.0 | Feb 3, 2012 | Oct 29, 2009 |
| Oracle_linux | — | Upgrade firefoxUpgrade nspr-develUpgrade nsprUpgrade xulrunnerUpgrade xulrunner-devel-unstableUpgrade xulrunner-devel | Oct 16, 2024 | Oct 29, 2009 |
| Suse | — | Upgrade mozilla-xulrunner192-x86Upgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-nsprUpgrade libidlUpgrade libfreebl3Upgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner191-x86Upgrade orbit2-32bitUpgrade libidl-x86Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner191Upgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-toolsUpgrade mozilla-nss-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefox-develUpgrade orbit2Upgrade gconf2Upgrade MozillaFirefox-translations-commonUpgrade gconf2-32bitUpgrade libidl-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner190-x86Upgrade MozillaFirefoxUpgrade orbit2-x86Upgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner192Upgrade mozilla-nss-32bitUpgrade libfreebl3-x86Upgrade libfreebl3-32bitUpgrade gconf2-x86Upgrade MozillaFirefox-translationsUpgrade mozilla-nssUpgrade mozilla-nspr-x86Upgrade mozilla-xulrunner190 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefox-3.5Upgrade xulrunner-1.9Upgrade firefox-3.0Upgrade abrowserUpgrade xulrunner-1.9.1 | Nov 8, 2024 | Oct 29, 2009 |
| Vmsa 2010 0001 1 Update For Service Console Packages Nss And Nspr | — | Upgrade VMware ESX 4.0 to build number 219382 | Sep 2, 2010 | Oct 29, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub