Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 do not properly validate downloadable fonts before use within an operating system's font implementation, which allows remote attackers to execute arbitrary code via vectors related to @font-face Cascading Style Sheets (CSS) rules.
CVSS Details
- CVSS 3.1 Base Score: 9.6
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefox | Dec 1, 2016 | Dec 10, 2010 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade firefoxUpgrade libxulUpgrade linux-firefoxUpgrade linux-firefox-develUpgrade seamonkey | Dec 10, 2025 | Dec 10, 2010 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/icecat.Upgrade dev-libs/nss.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Dec 10, 2010 |
| Mfsa2010 78 | — | Upgrade to Mozilla Firefox version 3.5.16Upgrade to Mozilla Firefox version 3.6.13 | Jun 14, 2012 | Dec 10, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.11 | Feb 3, 2012 | Dec 10, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.11Upgrade to Mozilla Thunderbird version 3.1.7 | Feb 22, 2012 | Dec 10, 2010 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Dec 10, 2010 |
| Suse | — | Upgrade MozillaThunderbird-develUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192-x86Upgrade MozillaThunderbird-translations-commonUpgrade mozilla-xulrunner192Upgrade MozillaThunderbirdUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefox-translationsUpgrade MozillaFirefoxUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-translationsUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192-gnome-32bitUpgrade MozillaFirefox-devel | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.1Upgrade abrowserUpgrade xulrunner-1.9.2Upgrade firefoxUpgrade firefox-3.5Upgrade thunderbirdUpgrade firefox-3.0 | Nov 8, 2024 | Dec 10, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub