Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade gnome-python2-extrasUpgrade totem-develUpgrade devhelpUpgrade gnome-python2-gtkmozembedUpgrade yelpUpgrade seamonkey-dom-inspectorUpgrade seamonkey-chatUpgrade totemUpgrade gnome-python2-gtkspellUpgrade seamonkey-nsprUpgrade seamonkey-js-debuggerUpgrade devhelp-develUpgrade firefoxUpgrade xulrunnerUpgrade xulrunner-develUpgrade gnome-python2-libeggUpgrade seamonkey-nssUpgrade seamonkey-develUpgrade seamonkeyUpgrade seamonkey-nspr-develUpgrade gnome-python2-gtkhtml2Upgrade escUpgrade totem-mozpluginUpgrade seamonkey-mailUpgrade thunderbirdUpgrade seamonkey-nss-devel | Dec 1, 2016 | Jun 24, 2010 |
| Freebsd | — | Upgrade linux-firefox-develUpgrade seamonkeyUpgrade thunderbirdUpgrade firefox | Dec 10, 2025 | Jun 23, 2010 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/icecat.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss. | Oct 30, 2017 | Jun 24, 2010 |
| Mfsa2010 30 | — | Upgrade to Mozilla Firefox version 3.6.4Upgrade to Mozilla Firefox version 3.5.10 | Jun 14, 2012 | Jun 24, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.5 | Feb 3, 2012 | Jun 24, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.5 | Feb 22, 2012 | Jun 24, 2010 |
| Oracle_linux | — | Upgrade devhelp-develUpgrade escUpgrade xulrunner-develUpgrade totemUpgrade xulrunnerUpgrade totem-develUpgrade totem-mozpluginUpgrade firefoxUpgrade gnome-python2-gtkhtml2Upgrade gnome-python2-gtkmozembedUpgrade gnome-python2-gtkspellUpgrade devhelpUpgrade gnome-python2-extrasUpgrade gnome-python2-libeggUpgrade yelp | Oct 16, 2024 | Jun 23, 2010 |
| Suse | — | Upgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner191-translations-commonUpgrade sap-aio-releaseUpgrade python-xpcom191Upgrade mozilla-xulrunner191-translations-otherUpgrade mozillafirefox-translations-commonUpgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade mozillafirefoxUpgrade mozilla-xulrunner191-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner191Upgrade mozillafirefox-translations-otherUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner191-develUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-xulrunner191-gnomevfs-64bitUpgrade mozilla-xulrunner191-64bitUpgrade mozilla-xulrunner191-translations-32bit | Feb 17, 2015 | Jun 24, 2010 |
| Ubuntu | — | Upgrade firefox-3.5Upgrade firefoxUpgrade firefox-3.0Upgrade abrowserUpgrade xulrunner-1.9.2Upgrade thunderbird | Nov 8, 2024 | Jun 24, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub