The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) via a malformed JavaScript regular expression that ends with a backslash in an unterminated character set ("[\\"), which leads to a buffer over-read.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade thunderbird | Jul 30, 2024 | Sep 15, 2006 |
| Freebsd | — | Upgrade linux-mozilla-develUpgrade linux-firefoxUpgrade linux-thunderbirdUpgrade mozilla-thunderbirdUpgrade linux-mozillaUpgrade linux-firefox-develUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade firefoxUpgrade seamonkeyUpgrade linux-seamonkey-develUpgrade mozilla | Dec 10, 2025 | Sep 15, 2006 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Sep 15, 2006 |
| Ubuntu | — | Upgrade mozilla-thunderbird-enigmailUpgrade mozilla-thunderbird-locale-ukUpgrade mozilla-thunderbird-locale-frUpgrade libnss3Upgrade mozilla-thunderbirdUpgrade mozilla-thunderbird-locale-nlUpgrade mozilla-thunderbird-locale-caUpgrade mozilla-thunderbird-locale-plUpgrade mozilla-thunderbird-locale-deUpgrade mozilla-thunderbird-inspectorUpgrade mozilla-thunderbird-typeaheadfindUpgrade firefoxUpgrade mozilla-thunderbird-locale-it | Nov 8, 2024 | Sep 15, 2006 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub