The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) via vectors that trigger memory corruption, related to the GetXMLEntity and FastAppendChar functions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nss-pkcs11-develUpgrade xulrunner-devel-unstableUpgrade seamonkeyUpgrade seamonkey-develUpgrade seamonkey-js-debuggerUpgrade seamonkey-nss-develUpgrade xulrunner-develUpgrade seamonkey-mailUpgrade seamonkey-nssUpgrade xulrunnerUpgrade nss-toolsUpgrade nspr-develUpgrade nssUpgrade seamonkey-dom-inspectorUpgrade seamonkey-nsprUpgrade seamonkey-nspr-develUpgrade thunderbirdUpgrade nsprUpgrade nss-develUpgrade firefoxUpgrade seamonkey-chat | Dec 1, 2016 | Dec 17, 2008 |
| Freebsd | — | Upgrade linux-firefoxUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade firefoxUpgrade thunderbird | Dec 10, 2025 | Dec 19, 2008 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox-bin.Upgrade dev-libs/nss.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade mail-client/mozilla-thunderbird. | Oct 30, 2017 | Dec 17, 2008 |
| Mfsa2008 60 | — | Upgrade to Mozilla Firefox version 2.0.0.19Upgrade to Mozilla Firefox version 3.0.5 | Jun 14, 2012 | Dec 17, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.14 | Feb 3, 2012 | Dec 17, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.19 | Feb 22, 2012 | Dec 17, 2008 |
| Oracle_linux | — | Upgrade nss-pkcs11-develUpgrade xulrunner-devel-unstableUpgrade nss-develUpgrade xulrunner-develUpgrade nss-toolsUpgrade nspr-develUpgrade nsprUpgrade xulrunnerUpgrade firefoxUpgrade nss | Oct 16, 2024 | Dec 17, 2008 |
| Suse | — | Upgrade MozillaFirefox-translationsUpgrade MozillaFirefox | Feb 17, 2015 | Dec 17, 2008 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade abrowserUpgrade xulrunner-1.9 | Nov 8, 2024 | Dec 17, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub