The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via vectors related to "insufficient class checking" in the Date class.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-mailUpgrade thunderbirdUpgrade yelpUpgrade firefoxUpgrade xulrunner-devel-unstableUpgrade seamonkey-develUpgrade nss-develUpgrade nss-pkcs11-develUpgrade seamonkey-nsprUpgrade seamonkey-nss-develUpgrade devhelpUpgrade nss-toolsUpgrade seamonkey-dom-inspectorUpgrade nssUpgrade seamonkey-nssUpgrade seamonkey-nspr-develUpgrade devhelp-develUpgrade seamonkey-chatUpgrade xulrunnerUpgrade seamonkeyUpgrade seamonkey-js-debuggerUpgrade xulrunner-devel | Dec 1, 2016 | Nov 13, 2008 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade linux-firefoxUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade firefox | Dec 10, 2025 | Nov 13, 2008 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade www-client/icecat.Upgrade mail-client/thunderbird.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Nov 13, 2008 |
| Mfsa2008 52 | — | Upgrade to Mozilla Firefox version 3.0.4Upgrade to Mozilla Firefox version 2.0.0.18 | Jun 14, 2012 | Nov 13, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.13 | Feb 3, 2012 | Nov 13, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.18 | Feb 22, 2012 | Nov 13, 2008 |
| Oracle_linux | — | Upgrade nss-develUpgrade xulrunnerUpgrade firefoxUpgrade nss-toolsUpgrade nssUpgrade xulrunner-devel-unstableUpgrade yelpUpgrade devhelpUpgrade nss-pkcs11-develUpgrade devhelp-develUpgrade xulrunner-devel | Oct 16, 2024 | Nov 13, 2008 |
| Suse | — | Upgrade mozilla-venkmanUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-ircUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-csUpgrade mozilla-xulrunner190-develUpgrade mozilla-huUpgrade MozillaThunderbird-translationsUpgrade MozillaFirefox-translationsUpgrade MozillaFirefoxUpgrade mozilla-mailUpgrade mozilla-deatUpgrade seamonkey-ircUpgrade mozilla-develUpgrade seamonkey-spellcheckerUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade epiphany-extensionsUpgrade mozilla-xulrunner181-64bitUpgrade seamonkey-venkmanUpgrade suse-releaseUpgrade MozillaThunderbirdUpgrade seamonkey-mailUpgrade seamonkey-dom-inspectorUpgrade mozilla-xulrunner190-translations-32bitUpgrade mozilla-xulrunner181Upgrade mozilla-xulrunner181-develUpgrade epiphanyUpgrade mozilla-xulrunner190-translations-64bitUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade epiphany-develUpgrade mozilla-dom-inspectorUpgrade mozillaUpgrade mozilla-xulrunner181-32bitUpgrade MozillaThunderbird-develUpgrade gecko-sdkUpgrade mozilla-calendarUpgrade epiphany-docUpgrade mozilla-xulrunner190-64bitUpgrade seamonkey | Feb 17, 2015 | Nov 13, 2008 |
| Ubuntu | — | Upgrade mozilla-thunderbirdUpgrade thunderbirdUpgrade abrowserUpgrade firefox-3.0Upgrade firefoxUpgrade xulrunner-1.9 | Nov 8, 2024 | Nov 13, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub