The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mozilla-gtk2Upgrade mozilla-embeddedUpgrade ja-linux-netscapeUpgrade mozilla-gtkUpgrade zhTW-linux-mozillafirebirdUpgrade fr-linux-netscapeUpgrade mozilla-firebirdUpgrade linux-firefoxUpgrade de-linux-netscapeUpgrade linux-phoenixUpgrade de-netscape7Upgrade pt_BR-netscape7Upgrade ja-mozillafirebird-gtk2Upgrade mozilla+ipv6Upgrade fr-netscape7Upgrade zhCN-linux-mozillafirebirdUpgrade mozilla-thunderbirdUpgrade linux-mozillaUpgrade mozilla-gtk1Upgrade mozillaUpgrade netscape7Upgrade de-linux-mozillafirebirdUpgrade linux-mozilla-develUpgrade ja-netscape7Upgrade linux-netscapeUpgrade linux-mozillafirebirdUpgrade firefoxUpgrade el-linux-mozillafirebirdUpgrade ru-linux-mozillafirebirdUpgrade ja-linux-mozillafirebird-gtk1Upgrade phoenix | Dec 10, 2025 | Jul 16, 2005 |
| Ubuntu | — | Upgrade mozilla-firefoxUpgrade mozilla-firefox-locale-jaUpgrade mozilla-firefox-locale-ukUpgrade mozilla-browserUpgrade mozilla-thunderbirdUpgrade mozilla-firefox-locale-trUpgrade mozilla-firefox-locale-nb | Nov 8, 2024 | Jul 13, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub