The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via vectors related to "insufficient class checking" in the Date class.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade devhelp-develUpgrade seamonkeyUpgrade xulrunnerUpgrade seamonkey-nssUpgrade nssUpgrade seamonkey-chatUpgrade seamonkey-js-debuggerUpgrade xulrunner-develUpgrade seamonkey-nspr-develUpgrade seamonkey-dom-inspectorUpgrade nss-develUpgrade devhelpUpgrade nss-pkcs11-develUpgrade seamonkey-nss-develUpgrade seamonkey-nsprUpgrade seamonkey-mailUpgrade yelpUpgrade nss-toolsUpgrade thunderbirdUpgrade seamonkey-develUpgrade firefoxUpgrade xulrunner-devel-unstable | Dec 1, 2016 | Nov 13, 2008 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade firefoxUpgrade thunderbird | Dec 10, 2025 | Nov 13, 2008 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/icecat.Upgrade mail-client/thunderbird.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner. | Oct 30, 2017 | Nov 13, 2008 |
| Mfsa2008 52 | — | Upgrade to Mozilla Firefox version 3.0.4Upgrade to Mozilla Firefox version 2.0.0.18 | Jun 14, 2012 | Nov 13, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.13 | Feb 3, 2012 | Nov 13, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.18 | Feb 22, 2012 | Nov 13, 2008 |
| Oracle_linux | — | Upgrade nss-develUpgrade nssUpgrade xulrunnerUpgrade firefoxUpgrade nss-toolsUpgrade devhelpUpgrade xulrunner-develUpgrade devhelp-develUpgrade xulrunner-devel-unstableUpgrade nss-pkcs11-develUpgrade yelp | Oct 16, 2024 | Nov 13, 2008 |
| Suse | — | Upgrade mozilla-ircUpgrade epiphany-extensionsUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-gnomevfsUpgrade MozillaFirefox-translationsUpgrade MozillaFirefoxUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-xulrunner190Upgrade mozilla-develUpgrade MozillaThunderbird-translationsUpgrade mozilla-huUpgrade seamonkey-spellcheckerUpgrade mozilla-xulrunner190-develUpgrade mozilla-deatUpgrade mozilla-venkmanUpgrade mozilla-xulrunner190-32bitUpgrade seamonkey-ircUpgrade mozilla-csUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-mailUpgrade suse-releaseUpgrade epiphanyUpgrade mozilla-xulrunner181Upgrade seamonkeyUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner181-32bitUpgrade seamonkey-dom-inspectorUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner190-64bitUpgrade epiphany-develUpgrade mozilla-xulrunner181-64bitUpgrade epiphany-docUpgrade gecko-sdkUpgrade mozilla-dom-inspectorUpgrade mozilla-calendarUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade seamonkey-mailUpgrade mozillaUpgrade mozilla-xulrunner190-translations-64bitUpgrade mozilla-xulrunner181-develUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner190-translations-32bit | Feb 17, 2015 | Nov 13, 2008 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefoxUpgrade firefox-3.0Upgrade abrowserUpgrade mozilla-thunderbirdUpgrade xulrunner-1.9 | Nov 8, 2024 | Nov 13, 2008 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub