Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-mozillaUpgrade mozilla-gtk1Upgrade firefoxUpgrade netscape7Upgrade mozillaUpgrade linux-mozilla-devel | Dec 10, 2025 | Sep 14, 2004 |
| Suse | — | Upgrade mozilla-calendarUpgrade mozilla-venkmanUpgrade mozilla-dom-inspectorUpgrade mozilla-ircUpgrade mozillaUpgrade mozilla-mail | Feb 17, 2015 | Aug 18, 2004 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub