The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to execute arbitrary code by appending an SVG comment DOM node to another type of document, which triggers memory corruption.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade firefox-esr | Jul 30, 2024 | Dec 20, 2006 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Dec 19, 2006 |
| Mfsa2006 73 | — | Upgrade to Mozilla Firefox version 2.0.0.1Upgrade to Mozilla Firefox version 1.5.0.9 | Jun 14, 2012 | Dec 19, 2006 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.0.7 | Feb 3, 2012 | Dec 19, 2006 |
| Suse | — | Upgrade MozillaThunderbirdUpgrade MozillaThunderbird-translationsUpgrade suse-releaseUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations | Feb 17, 2015 | Dec 19, 2006 |
| Ubuntu | — | Upgrade libnspr4Upgrade firefox-devUpgrade firefoxUpgrade libnss3Upgrade libnss-devUpgrade libnspr-dev | Nov 8, 2024 | Dec 20, 2006 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub