Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade ja-netscape7Upgrade mozillaUpgrade linux-netscapeUpgrade el-linux-mozillafirebirdUpgrade linux-mozilla-develUpgrade netscape7Upgrade firefoxUpgrade ja-linux-mozillafirebird-gtk1Upgrade ru-linux-mozillafirebirdUpgrade phoenixUpgrade linux-mozillafirebirdUpgrade de-linux-mozillafirebirdUpgrade linux-phoenixUpgrade pt_BR-netscape7Upgrade fr-netscape7Upgrade mozilla-embeddedUpgrade fr-linux-netscapeUpgrade zhTW-linux-mozillafirebirdUpgrade mozilla-gtkUpgrade zhCN-linux-mozillafirebirdUpgrade mozilla-gtk1Upgrade mozilla-thunderbirdUpgrade mozilla-gtk2Upgrade linux-mozillaUpgrade de-linux-netscapeUpgrade linux-firefoxUpgrade ja-mozillafirebird-gtk2Upgrade de-netscape7Upgrade mozilla-firebirdUpgrade mozilla+ipv6Upgrade ja-linux-netscape | Dec 10, 2025 | Jul 16, 2005 |
| Ubuntu | — | Upgrade mozilla-browserUpgrade mozilla-firefox-locale-ukUpgrade mozilla-firefoxUpgrade mozilla-firefox-locale-jaUpgrade mozilla-thunderbirdUpgrade mozilla-firefox-locale-nbUpgrade mozilla-firefox-locale-tr | Nov 8, 2024 | Jul 13, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub