The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly initialize data, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via crafted documents.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade xulrunner-develUpgrade xulrunner | Dec 1, 2016 | Oct 30, 2013 |
| Freebsd | — | Upgrade thunderbirdUpgrade seamonkeyUpgrade firefoxUpgrade linux-firefoxUpgrade linux-seamonkeyUpgrade linux-thunderbird | Dec 10, 2025 | Oct 30, 2013 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade www-client/seamonkey-bin.Upgrade dev-libs/nspr. | Oct 30, 2017 | Oct 30, 2013 |
| Mfsa2013 95 | — | Upgrade to Mozilla Firefox ESR version 17.0.10Upgrade to Mozilla Firefox ESR version 24.1Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 25.0 | Oct 30, 2013 | Oct 29, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.22.0 | Dec 8, 2014 | Oct 30, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 24.1Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird ESR version 17.0.10 | Oct 30, 2013 | Oct 29, 2013 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade firefoxUpgrade thunderbirdUpgrade xulrunner-devel | Oct 16, 2024 | Oct 30, 2013 |
| Suse | — | Upgrade mozilla-nss-develUpgrade firefox-freetype2Upgrade mozilla-xulrunner191Upgrade MozillaFirefox-translations-otherUpgrade firefox-libgcc_s1-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozillafirefox-buildsymbolsUpgrade firefox-pixman-32bitUpgrade mozilla-xulrunner191-translations-32bitUpgrade firefox-libstdc++6Upgrade mozilla-js-32bitUpgrade firefox-fontconfig-32bitUpgrade mozilla-nspr-develUpgrade mozilla-xulrunner192-gnome-32bitUpgrade xulrunner-develUpgrade MozillaThunderbird-translations-otherUpgrade firefox-libstdc++6-32bitUpgrade seamonkey-ircUpgrade xulrunnerUpgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade MozillaFirefoxUpgrade seamonkey-translations-otherUpgrade mozilla-nss-toolsUpgrade enigmailUpgrade firefox-atk-32bitUpgrade mozilla-jsUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner191-32bitUpgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbird-develUpgrade mozilla-nss-32bitUpgrade firefox-glib2Upgrade firefox-atkUpgrade mozilla-xulrunner191-translationsUpgrade firefox-cairoUpgrade firefox-gtk2-32bitUpgrade firefox-gtk2Upgrade firefox-pangoUpgrade mozilla-nssUpgrade firefox-freetype2-32bitUpgrade xulrunner-32bitUpgrade MozillaFirefox-develUpgrade mozilla-nsprUpgrade firefox-pixmanUpgrade seamonkeyUpgrade firefox-cairo-32bitUpgrade seamonkey-translations-commonUpgrade firefox-gtk2-langUpgrade firefox-pcreUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nspr-32bitUpgrade firefox-libgcc_s1Upgrade MozillaThunderbird-buildsymbolsUpgrade mozilla-xulrunner192Upgrade MozillaFirefox-translationsUpgrade MozillaThunderbirdUpgrade mozillafirefox-branding-upstreamUpgrade firefox-glib2-32bitUpgrade firefox-fontconfigUpgrade firefox-pcre-32bitUpgrade mozilla-xulrunner192-32bitUpgrade xulrunner-buildsymbolsUpgrade seamonkey-dom-inspectorUpgrade firefox-pango-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-translations-32bitUpgrade seamonkey-venkman | Feb 17, 2015 | Oct 30, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Oct 30, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub