Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade firefoxUpgrade linux-mozilla-develUpgrade netscape7Upgrade ja-netscape7Upgrade linux-mozillaUpgrade linux-phoenixUpgrade mozilla+ipv6Upgrade de-linux-netscapeUpgrade mozilla-gtk1Upgrade ru-linux-mozillafirebirdUpgrade zhTW-linux-mozillafirebirdUpgrade linux-netscapeUpgrade zhCN-linux-mozillafirebirdUpgrade ja-mozillafirebird-gtk2Upgrade de-linux-mozillafirebirdUpgrade linux-firefoxUpgrade mozilla-firebirdUpgrade ja-linux-netscapeUpgrade el-linux-mozillafirebirdUpgrade ja-linux-mozillafirebird-gtk1Upgrade mozilla-embeddedUpgrade fr-linux-netscapeUpgrade mozilla-gtk2Upgrade mozilla-gtkUpgrade fr-netscape7Upgrade linux-mozillafirebirdUpgrade mozillaUpgrade de-netscape7Upgrade mozilla-thunderbirdUpgrade phoenixUpgrade pt_BR-netscape7 | Dec 10, 2025 | Sep 23, 2005 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox.Upgrade net-libs/gecko-sdk.Upgrade www-client/mozilla.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-bin. | Oct 30, 2017 | Sep 23, 2005 |
| Mfsa2005 58 | — | Upgrade to Mozilla Firefox version 1.7.12 | Sep 29, 2005 | Sep 23, 2005 |
| Suse | — | Upgrade mozilla-venkmanUpgrade mozilla-huUpgrade mozilla-calendarUpgrade mozilla-dom-inspectorUpgrade mozilla-koUpgrade mozillaUpgrade mozilla-develUpgrade mozilla-deatUpgrade mozilla-csUpgrade mozilla-ircUpgrade mozilla-jaUpgrade mozilla-mail | Feb 17, 2015 | Sep 23, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub