Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade libvorbisUpgrade libvorbis-develUpgrade firefoxUpgrade libvorbis-devel-docsUpgrade xulrunner-devel | Dec 1, 2016 | Feb 1, 2012 |
| Debian | — | Upgrade libvorbisidecUpgrade libvorbis | Jul 30, 2024 | Feb 1, 2012 |
| Freebsd | — | Upgrade libtremor | Dec 10, 2025 | Aug 25, 2015 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/firefox.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/icecat. | Oct 30, 2017 | Feb 1, 2012 |
| Mfsa2012 07 | — | Upgrade to Mozilla Firefox version 10.0Upgrade to Mozilla Firefox version 3.6.26Upgrade to the latest version of Mozilla Firefox | Jun 14, 2012 | Feb 1, 2012 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.7.0 | Feb 3, 2012 | Feb 1, 2012 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.18Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 10.0 | Feb 22, 2012 | Feb 1, 2012 |
| Oracle Solaris | — | Upgrade codec/ogg-vorbis to version 2.30.0-0.175.0.8.0.2.0 on Solaris 11.0 | May 29, 2017 | Feb 1, 2012 |
| Oracle_linux | — | Upgrade libvorbis-develUpgrade xulrunnerUpgrade libvorbis-devel-docsUpgrade libvorbisUpgrade firefoxUpgrade xulrunner-devel | Apr 6, 2018 | Feb 1, 2012 |
| Suse | — | Upgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192Upgrade libvorbis0-32bitUpgrade libvorbisenc2-32bitUpgrade MozillaFirefox-develUpgrade libvorbisenc2Upgrade mozilla-xulrunner192-gnomeUpgrade libvorbis-docUpgrade libvorbisenc2-x86-64-v3Upgrade mozilla-xulrunner192-translations-32bitUpgrade libvorbis0Upgrade MozillaFirefox-translationsUpgrade libvorbisfile3-x86-64-v3Upgrade libvorbis-x86Upgrade MozillaThunderbirdUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner192-gnome-32bitUpgrade MozillaFirefox-translations-commonUpgrade libvorbis-32bitUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-otherUpgrade libvorbisfile3Upgrade mozilla-xulrunner192-translationsUpgrade libvorbis0-x86-64-v3Upgrade mozilla-xulrunner192-32bitUpgrade libvorbisUpgrade libvorbisfile3-32bitUpgrade MozillaThunderbird-translations-commonUpgrade libvorbis-develUpgrade MozillaThunderbird-translations-other | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade firefoxUpgrade thunderbirdUpgrade libvorbis0a | Nov 8, 2024 | Feb 1, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub