Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving (1) long strings in the toSource method of the Object, Array, and String objects; and (2) unspecified "string function arguments."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade thunderbird | Jul 30, 2024 | Jul 27, 2006 |
| Freebsd | — | Upgrade mozillaUpgrade linux-mozilla-develUpgrade seamonkeyUpgrade linux-firefox-develUpgrade firefoxUpgrade thunderbirdUpgrade mozilla-thunderbirdUpgrade linux-thunderbirdUpgrade linux-firefoxUpgrade linux-mozillaUpgrade linux-seamonkey | Dec 10, 2025 | Jul 27, 2006 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Jul 27, 2006 |
| Ubuntu | — | Upgrade mozilla-thunderbird-locale-plUpgrade mozilla-thunderbirdUpgrade mozilla-browserUpgrade libnspr4Upgrade mozilla-thunderbird-locale-ukUpgrade mozilla-thunderbird-locale-frUpgrade mozilla-thunderbird-enigmailUpgrade mozilla-mailnewsUpgrade mozilla-thunderbird-locale-nlUpgrade mozilla-thunderbird-locale-deUpgrade libnss3Upgrade firefoxUpgrade mozilla-thunderbird-inspectorUpgrade mozilla-thunderbird-locale-itUpgrade mozilla-thunderbird-locale-caUpgrade mozilla-thunderbird-typeaheadfindUpgrade mozilla-psm | Nov 8, 2024 | Jul 27, 2006 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub