The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger memory corruption, as demonstrated by e4x/extensions/regress-410192.js.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbird | Dec 1, 2016 | Nov 13, 2008 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/icecat.Upgrade mail-client/thunderbird.Upgrade www-client/firefox. | Oct 30, 2017 | Nov 13, 2008 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunner-develUpgrade devhelpUpgrade nss-develUpgrade nss-toolsUpgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade devhelp-develUpgrade yelpUpgrade nss-pkcs11-develUpgrade nss | Oct 16, 2024 | Nov 13, 2008 |
| Suse | — | Upgrade mozilla-xulrunner190-translationsUpgrade MozillaThunderbird-translationsUpgrade seamonkey-ircUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-huUpgrade epiphanyUpgrade seamonkey-spellcheckerUpgrade suse-releaseUpgrade mozilla-venkmanUpgrade MozillaFirefox-translationsUpgrade mozilla-deatUpgrade epiphany-extensionsUpgrade mozilla-xulrunner190Upgrade epiphany-docUpgrade mozilla-ircUpgrade seamonkey-dom-inspectorUpgrade mozilla-xulrunner190-32bitUpgrade MozillaFirefoxUpgrade mozilla-develUpgrade mozilla-mailUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-dom-inspectorUpgrade mozilla-xulrunner190-translations-32bitUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner190-develUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner181-develUpgrade mozilla-xulrunner190-64bitUpgrade mozilla-xulrunner181-32bitUpgrade mozilla-xulrunner181-64bitUpgrade mozilla-csUpgrade mozilla-calendarUpgrade seamonkey-mailUpgrade mozilla-xulrunner190-translations-64bitUpgrade gecko-sdkUpgrade seamonkeyUpgrade epiphany-develUpgrade mozillaUpgrade mozilla-xulrunner181Upgrade seamonkey-venkman | Feb 17, 2015 | Nov 13, 2008 |
| Ubuntu | — | Upgrade xulrunnerUpgrade firefox-3.0Upgrade mozilla-thunderbirdUpgrade xulrunner-1.9Upgrade firefoxUpgrade seamonkeyUpgrade thunderbird | Nov 19, 2024 | Nov 13, 2008 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub