The layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via multiple vectors that trigger an assertion failure or other consequences.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade yelpUpgrade seamonkey-mailUpgrade devhelp-develUpgrade seamonkey-dom-inspectorUpgrade seamonkeyUpgrade thunderbirdUpgrade firefoxUpgrade nss-toolsUpgrade seamonkey-nssUpgrade xulrunner-devel-unstableUpgrade nss-develUpgrade nss-pkcs11-develUpgrade seamonkey-develUpgrade seamonkey-chatUpgrade xulrunner-develUpgrade seamonkey-js-debuggerUpgrade xulrunnerUpgrade nssUpgrade seamonkey-nss-develUpgrade seamonkey-nsprUpgrade seamonkey-nspr-develUpgrade devhelp | Dec 1, 2016 | Nov 13, 2008 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade thunderbirdUpgrade seamonkeyUpgrade firefoxUpgrade linux-firefoxUpgrade linux-thunderbird | Dec 10, 2025 | Nov 13, 2008 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade dev-libs/nss.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade www-client/firefox. | Oct 30, 2017 | Nov 13, 2008 |
| Mfsa2008 52 | — | Upgrade to Mozilla Firefox version 3.0.4Upgrade to Mozilla Firefox version 2.0.0.18 | Jun 14, 2012 | Nov 13, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.13 | Feb 3, 2012 | Nov 13, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.18 | Feb 22, 2012 | Nov 13, 2008 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunnerUpgrade nss-pkcs11-develUpgrade devhelp-develUpgrade nss-toolsUpgrade devhelpUpgrade nss-develUpgrade xulrunner-develUpgrade nssUpgrade yelpUpgrade xulrunner-devel-unstable | Oct 16, 2024 | Nov 13, 2008 |
| Suse | — | Upgrade mozilla-xulrunner181-64bitUpgrade mozilla-dom-inspectorUpgrade mozilla-xulrunner181-develUpgrade mozilla-ircUpgrade epiphany-develUpgrade seamonkey-spellcheckerUpgrade mozilla-xulrunner190-64bitUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner190-develUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-gnomevfsUpgrade seamonkey-mailUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner181Upgrade epiphany-extensionsUpgrade MozillaThunderbird-translationsUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner190-translations-64bitUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade seamonkeyUpgrade suse-releaseUpgrade seamonkey-ircUpgrade mozilla-xulrunner181-32bitUpgrade MozillaThunderbirdUpgrade mozilla-huUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-develUpgrade seamonkey-dom-inspectorUpgrade mozilla-csUpgrade mozilla-deatUpgrade mozilla-xulrunner190-translations-32bitUpgrade mozilla-calendarUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozillaUpgrade gecko-sdkUpgrade epiphanyUpgrade epiphany-docUpgrade mozilla-mailUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-venkmanUpgrade MozillaFirefox | Feb 17, 2015 | Nov 13, 2008 |
| Ubuntu | — | Upgrade abrowserUpgrade thunderbirdUpgrade xulrunner-1.9Upgrade firefox-3.0Upgrade firefoxUpgrade mozilla-thunderbird | Nov 8, 2024 | Nov 13, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub