The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger memory corruption, as demonstrated by e4x/extensions/regress-410192.js.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbird | Dec 1, 2016 | Nov 13, 2008 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner.Upgrade www-client/icecat.Upgrade www-client/firefox.Upgrade dev-libs/nss. | Oct 30, 2017 | Nov 13, 2008 |
| Oracle_linux | — | Upgrade nssUpgrade nss-toolsUpgrade xulrunnerUpgrade xulrunner-devel-unstableUpgrade nss-pkcs11-develUpgrade yelpUpgrade devhelp-develUpgrade xulrunner-develUpgrade nss-develUpgrade devhelpUpgrade firefox | Oct 16, 2024 | Nov 13, 2008 |
| Suse | — | Upgrade seamonkey-spellcheckerUpgrade epiphany-extensionsUpgrade MozillaFirefoxUpgrade mozilla-venkmanUpgrade mozilla-xulrunner190-translationsUpgrade epiphanyUpgrade mozilla-ircUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-develUpgrade mozilla-huUpgrade seamonkey-ircUpgrade epiphany-docUpgrade mozilla-deatUpgrade mozilla-xulrunner190-32bitUpgrade seamonkey-dom-inspectorUpgrade mozilla-mailUpgrade mozilla-xulrunner190Upgrade MozillaThunderbird-translationsUpgrade suse-releaseUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner181-develUpgrade mozilla-xulrunner181-32bitUpgrade seamonkeyUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner190-64bitUpgrade mozilla-xulrunner181Upgrade seamonkey-mailUpgrade mozilla-xulrunner190-translations-32bitUpgrade mozilla-xulrunner190-develUpgrade mozillaUpgrade mozilla-xulrunner181-64bitUpgrade mozilla-csUpgrade mozilla-dom-inspectorUpgrade gecko-sdkUpgrade epiphany-develUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-calendarUpgrade mozilla-xulrunner190-translations-64bitUpgrade seamonkey-venkmanUpgrade MozillaThunderbird | Feb 17, 2015 | Nov 13, 2008 |
| Ubuntu | — | Upgrade firefoxUpgrade mozilla-thunderbirdUpgrade seamonkeyUpgrade xulrunner-1.9Upgrade thunderbirdUpgrade firefox-3.0Upgrade xulrunner | Nov 19, 2024 | Nov 13, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub