Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and (1) a zero value of the "this" variable in the nsContentList::Item function; (2) interaction of the indic IME extension, a Hindi language selection, and the "g" character; and (3) interaction of the nsFrameList::SortByContentOrder function with a certain insufficient protection of inline frames.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade devhelp-develUpgrade devhelpUpgrade firefox | Dec 1, 2016 | Sep 24, 2008 |
| Freebsd | — | Upgrade linux-seamonkey-develUpgrade thunderbirdUpgrade seamonkeyUpgrade firefoxUpgrade flockUpgrade linux-firefoxUpgrade linux-firefox-develUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade linux-flock | Dec 10, 2025 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird.Upgrade www-client/icecat.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 42 | — | Upgrade to Mozilla Firefox version 2.0.0.17Upgrade to Mozilla Firefox version 3.0.2 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.17 | Feb 22, 2012 | Sep 24, 2008 |
| Oracle_linux | — | Upgrade firefoxUpgrade nss-toolsUpgrade xulrunner-develUpgrade nssUpgrade devhelpUpgrade nss-develUpgrade nss-pkcs11-develUpgrade xulrunner-devel-unstableUpgrade devhelp-develUpgrade xulrunnerUpgrade yelp | Oct 16, 2024 | Sep 24, 2008 |
| Suse | — | Upgrade MozillaFirefoxUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-32bitUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner190-x86Upgrade MozillaFirefox-translationsUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner190 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade xulrunner-1.9Upgrade firefoxUpgrade mozilla-thunderbirdUpgrade firefox-3.0 | Nov 8, 2024 | Sep 24, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub