The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade libvorbisUpgrade libvorbis-develUpgrade xulrunner-develUpgrade firefoxUpgrade libvorbis-devel-docs | Dec 1, 2016 | Feb 1, 2012 |
| Debian | — | Upgrade libvorbisUpgrade libvorbisidec | Jul 30, 2024 | Feb 1, 2012 |
| Freebsd | — | Upgrade libtremor | Dec 10, 2025 | Aug 25, 2015 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/icecat.Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner-bin. | Oct 30, 2017 | Feb 1, 2012 |
| Mfsa2012 07 | — | Upgrade to Mozilla Firefox version 10.0Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 3.6.26 | Jun 14, 2012 | Feb 1, 2012 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.7Upgrade to the latest version of Mozilla SeaMonkey | Feb 3, 2012 | Feb 1, 2012 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.18Upgrade to Mozilla Thunderbird version 10.0Upgrade to the latest version of Mozilla Thunderbird | Feb 22, 2012 | Feb 1, 2012 |
| Oracle Solaris | — | Upgrade codec/ogg-vorbis to version 2.30.0-0.175.0.8.0.2.0 on Solaris 11.0 | May 29, 2017 | Feb 1, 2012 |
| Oracle_linux | — | Upgrade libvorbis-develUpgrade xulrunnerUpgrade libvorbis-devel-docsUpgrade firefoxUpgrade xulrunner-develUpgrade libvorbis | Apr 6, 2018 | Feb 1, 2012 |
| Suse | — | Upgrade libvorbis-docUpgrade mozilla-xulrunner192-x86Upgrade libvorbisenc2Upgrade libvorbis0-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade libvorbisenc2-x86-64-v3Upgrade mozilla-xulrunner192Upgrade libvorbisenc2-32bitUpgrade MozillaFirefox-develUpgrade libvorbis0Upgrade mozilla-xulrunner192-develUpgrade MozillaFirefoxUpgrade libvorbis-32bitUpgrade MozillaThunderbirdUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade libvorbisfile3Upgrade libvorbis-develUpgrade libvorbisfile3-x86-64-v3Upgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-gnome-32bitUpgrade libvorbis0-x86-64-v3Upgrade mozilla-xulrunner192-32bitUpgrade MozillaThunderbird-develUpgrade libvorbis-x86Upgrade libvorbisfile3-32bitUpgrade MozillaThunderbird-translations-otherUpgrade libvorbisUpgrade MozillaThunderbird-translations-common | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade libvorbis0aUpgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Feb 1, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub