The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Use-after-free vulnerability in the serializeToStream implementation in the XMLSerializer component in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via crafted web content.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade firefoxUpgrade thunderbird | Dec 1, 2016 | Jan 13, 2013 |
| Freebsd | — | Upgrade libxulUpgrade thunderbirdUpgrade firefoxUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade linux-firefoxUpgrade linux-thunderbirdUpgrade ca_root_nss | Dec 10, 2025 | Jan 9, 2013 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Jan 13, 2013 |
| Mfsa2013 16 | — | Upgrade to Mozilla Firefox ESR version 17.0.2Upgrade to Mozilla Firefox version 18.0Upgrade to Mozilla Firefox ESR version 10.0.12Upgrade to the latest version of Mozilla Firefox | Jan 14, 2013 | Jan 13, 2013 |
| Mozilla Seamonkey | — | Upgrade to the latest version of Mozilla SeaMonkeyUpgrade to Mozilla SeaMonkey version 2.15 | Jan 10, 2013 | Jan 8, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 17.0.2Upgrade to Mozilla Thunderbird ESR version 10.0.12Upgrade to Mozilla Thunderbird ESR version 17.0.2Upgrade to the latest version of Mozilla Thunderbird | Jan 10, 2013 | Jan 8, 2013 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade thunderbirdUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Jan 13, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 8, 2013 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-sysinit-debuginfoUpgrade mozilla-js-debuginfo-32bitUpgrade mozilla-js-32bitUpgrade mozilla-nss-certs-32bitUpgrade seamonkey-dom-inspectorUpgrade libfreebl3-32bitUpgrade mozilla-js-debuginfoUpgrade mozilla-nspr-x86Upgrade seamonkey-translations-otherUpgrade mozilla-nss-certsUpgrade MozillaThunderbird-devel-debuginfoUpgrade mozilla-nss-32bitUpgrade xulrunner-develUpgrade mozilla-nss-sysinit-debuginfo-x86Upgrade libsoftokn3-32bitUpgrade libsoftokn3Upgrade firefox3-gtk2-32bitUpgrade seamonkeyUpgrade mozilla-nspr-debuginfo-x86Upgrade libfreebl3-debuginfo-x86Upgrade seamonkey-translations-commonUpgrade mozilla-nss-tools-debuginfoUpgrade MozillaFirefox-translationsUpgrade firefox3-pango-32bitUpgrade libsoftokn3-debuginfo-x86Upgrade xulrunner-debuginfo-32bitUpgrade xulrunnerUpgrade enigmailUpgrade seamonkey-debuginfoUpgrade firefox3-gtk2Upgrade mozilla-nss-certs-x86Upgrade libfreebl3-debuginfoUpgrade mozilla-nspr-debuginfo-32bitUpgrade xulrunner-debuginfo-x86Upgrade mozilla-nspr-32bitUpgrade seamonkey-ircUpgrade mozilla-nss-toolsUpgrade MozillaFirefoxUpgrade mozilla-nss-debuginfo-x86Upgrade mozilla-nss-debuginfoUpgrade mozilla-nss-certs-debuginfo-32bitUpgrade firefox3-cairoUpgrade MozillaThunderbird-debugsourceUpgrade mozilla-nss-x86Upgrade mozilla-nss-develUpgrade mozilla-nss-certs-debuginfo-x86Upgrade mozilla-js-debuginfo-x86Upgrade mozilla-nss-certs-debuginfoUpgrade xulrunner-debuginfoUpgrade MozillaThunderbird-develUpgrade mozilla-nss-sysinit-x86Upgrade MozillaFirefox-debugsourceUpgrade mozilla-js-x86Upgrade MozillaFirefox-translations-commonUpgrade mozilla-nsprUpgrade libsoftokn3-x86Upgrade mozillafirefox-buildsymbolsUpgrade MozillaFirefox-branding-SLEDUpgrade MozillaThunderbird-buildsymbolsUpgrade mozilla-nss-64bitUpgrade mozilla-nspr-develUpgrade firefox3-cairo-32bitUpgrade mozilla-nspr-debugsourceUpgrade libfreebl3Upgrade libsoftokn3-debuginfo-32bitUpgrade firefox3-pangoUpgrade mozillafirefox-branding-upstreamUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-develUpgrade MozillaThunderbirdUpgrade seamonkey-debugsourceUpgrade enigmail-debuginfoUpgrade MozillaThunderbird-debuginfoUpgrade MozillaFirefox-debuginfoUpgrade mozilla-jsUpgrade mozilla-nspr-64bitUpgrade mozilla-nss-debugsourceUpgrade mozilla-nss-sysinitUpgrade xulrunner-buildsymbolsUpgrade xulrunner-x86Upgrade libfreebl3-x86Upgrade mozilla-nssUpgrade mozilla-nss-debuginfo-32bitUpgrade xulrunner-debugsourceUpgrade xulrunner-devel-debuginfoUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade xulrunner-32bitUpgrade libsoftokn3-debuginfoUpgrade sle-sdk-releaseUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-nspr-debuginfoUpgrade libfreebl3-debuginfo-32bitUpgrade mozilla-nss-sysinit-32bitUpgrade seamonkey-venkman | Feb 17, 2015 | Jan 13, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Jan 13, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub