The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mozilla-thunderbirdUpgrade thunderbirdUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade mozillaUpgrade linux-firefoxUpgrade firefoxUpgrade linux-mozillaUpgrade linux-seamonkey-develUpgrade firefox-jaUpgrade linux-mozilla-develUpgrade lightningUpgrade linux-thunderbirdUpgrade linux-firefox-devel | Dec 10, 2025 | Feb 24, 2007 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird-bin. | Oct 30, 2017 | Feb 26, 2007 |
| Mfsa2007 06 | — | Upgrade to Mozilla Firefox version 2.0.0.2Upgrade to Mozilla Firefox version 1.5.0.10 | Jun 14, 2012 | Feb 26, 2007 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.0.8 | Feb 3, 2012 | Feb 26, 2007 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 1.5.0.10 | Feb 22, 2012 | Feb 26, 2007 |
| Suse | — | Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-translationsUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade libnss3Upgrade libnspr4Upgrade firefoxUpgrade mozilla-thunderbird | Nov 8, 2024 | Feb 26, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub