The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving JSOP_DEFVAR and properties that lack the JSPROP_PERMANENT attribute.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade firefoxUpgrade thunderbirdUpgrade xulrunner-devel-unstable | Dec 1, 2016 | Apr 22, 2009 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade seamonkeyUpgrade linux-firefox-develUpgrade linux-seamonkey-develUpgrade thunderbirdUpgrade firefoxUpgrade linux-thunderbirdUpgrade linux-firefox | Dec 10, 2025 | Apr 22, 2009 |
| Gentoo Linux | — | Upgrade dev-libs/nss.Upgrade www-client/firefox-bin.Upgrade www-client/icecat.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade net-libs/xulrunner. | Oct 30, 2017 | Apr 22, 2009 |
| Mfsa2009 14 | — | Upgrade to Mozilla Firefox version 3.0.9 | Jun 14, 2012 | Apr 22, 2009 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.16 | Feb 3, 2012 | Apr 22, 2009 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.22 | Feb 22, 2012 | Apr 22, 2009 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Apr 22, 2009 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefoxUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner190-32bitUpgrade orbit2Upgrade mozilla-xulrunner190Upgrade gconf2Upgrade mozilla-xulrunner192Upgrade mozilla-xulrunner191-x86Upgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nsprUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner192-translationsUpgrade gconf2-x86Upgrade libfreebl3-x86Upgrade gconf2-32bitUpgrade libfreebl3Upgrade orbit2-x86Upgrade libidlUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner190-x86Upgrade libidl-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-x86Upgrade orbit2-32bitUpgrade mozilla-nspr-x86Upgrade mozilla-nssUpgrade libfreebl3-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner191-translationsUpgrade MozillaFirefox-branding-SLEDUpgrade libidl-x86Upgrade mozilla-nss-x86Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner190-translations | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade thunderbirdUpgrade abrowserUpgrade firefox-3.0 | Nov 8, 2024 | Apr 22, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub