Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value that triggers a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade gnome-python2-gtkspellUpgrade devhelpUpgrade yelpUpgrade totem-mozpluginUpgrade gnome-python2-gtkmozembedUpgrade xulrunnerUpgrade gnome-python2-libeggUpgrade xulrunner-develUpgrade escUpgrade firefoxUpgrade totem-develUpgrade devhelp-develUpgrade gnome-python2-extrasUpgrade gnome-python2-gtkhtml2Upgrade totem | Dec 1, 2016 | Jun 24, 2010 |
| Freebsd | — | Upgrade linux-firefox-develUpgrade seamonkeyUpgrade thunderbirdUpgrade firefox | Dec 10, 2025 | Jun 23, 2010 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox-bin.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird. | Oct 30, 2017 | Jun 24, 2010 |
| Mfsa2010 29 | — | Upgrade to Mozilla Firefox version 3.6.4Upgrade to Mozilla Firefox version 3.5.10 | Jun 14, 2012 | Jun 24, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.5 | Feb 3, 2012 | Jun 24, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.5 | Feb 22, 2012 | Jun 24, 2010 |
| Oracle_linux | — | Upgrade devhelpUpgrade escUpgrade gnome-python2-gtkmozembedUpgrade xulrunner-develUpgrade devhelp-develUpgrade yelpUpgrade totemUpgrade gnome-python2-libeggUpgrade totem-mozpluginUpgrade gnome-python2-gtkhtml2Upgrade gnome-python2-gtkspellUpgrade firefoxUpgrade totem-develUpgrade gnome-python2-extrasUpgrade xulrunner | Oct 16, 2024 | Jun 23, 2010 |
| Suse | — | Upgrade libidl-x86Upgrade MozillaThunderbird-translations-otherUpgrade mozilla-xulrunner191-gnomevfsUpgrade MozillaThunderbirdUpgrade libfreebl3-x86Upgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-nssUpgrade mozilla-xulrunner192-x86Upgrade MozillaFirefox-translations-commonUpgrade mozilla-nsprUpgrade orbit2-x86Upgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefox-develUpgrade libfreebl3Upgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner190-32bitUpgrade libidl-32bitUpgrade mozilla-xulrunner191-32bitUpgrade gconf2-32bitUpgrade mozilla-xulrunner192Upgrade orbit2Upgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner192-translationsUpgrade libidlUpgrade gconf2Upgrade MozillaFirefox-translationsUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-nss-toolsUpgrade libfreebl3-32bitUpgrade gconf2-x86Upgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner191Upgrade mozilla-xulrunner190Upgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-nspr-x86Upgrade MozillaFirefoxUpgrade mozilla-nss-32bitUpgrade mozilla-nss-x86Upgrade orbit2-32bitUpgrade mozilla-xulrunner191-translationsUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-32bit | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade firefoxUpgrade firefox-3.5Upgrade firefox-3.0Upgrade thunderbirdUpgrade xulrunner-1.9.2 | Nov 8, 2024 | Jun 24, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub