The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensitive information in opportunistic circumstances, via a crafted XBM image file.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-js-debuggerUpgrade seamonkey-mailUpgrade seamonkey-develUpgrade seamonkey-chatUpgrade seamonkey-dom-inspectorUpgrade seamonkey | Dec 1, 2016 | Sep 24, 2008 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-thunderbirdUpgrade linux-seamonkey-develUpgrade linux-firefox-develUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade linux-flockUpgrade flockUpgrade firefoxUpgrade seamonkey | Dec 10, 2025 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox-bin.Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 45 | — | Upgrade to Mozilla Firefox version 2.0.0.17 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Suse | — | Upgrade mozilla-xulrunner181-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner181-l10nUpgrade MozillaFirefoxUpgrade mozilla-ircUpgrade mozilla-deatUpgrade mozilla-develUpgrade mozilla-huUpgrade mozilla-calendarUpgrade seamonkey-spellcheckerUpgrade mozilla-venkmanUpgrade mozilla-mailUpgrade suse-releaseUpgrade seamonkey-ircUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner181-64bitUpgrade mozilla-xulrunner181Upgrade mozilla-xulrunner181-develUpgrade seamonkey-dom-inspectorUpgrade mozilla-csUpgrade mozillaUpgrade seamonkey-mailUpgrade seamonkeyUpgrade mozilla-dom-inspectorUpgrade gecko-sdk | Feb 17, 2015 | Sep 24, 2008 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade firefoxUpgrade xulrunner-1.9 | Nov 8, 2024 | Sep 24, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub