Mozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via vectors involving double frame construction, related to (1) nsHTMLContentSink.cpp, (2) nsXMLContentSink.cpp, and (3) nsPresShell.cpp, and the nsSubDocumentFrame::Reflow function.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade xulrunner-devel-unstableUpgrade firefox | Dec 1, 2016 | Jul 22, 2009 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner-bin.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade www-client/icecat.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin. | Oct 30, 2017 | Jul 22, 2009 |
| Mfsa2009 34 | — | Upgrade to Mozilla Firefox version 3.0.12Upgrade to Mozilla Firefox version 3.5 | Jun 14, 2012 | Jul 22, 2009 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade firefoxUpgrade xulrunner-devel-unstable | Oct 16, 2024 | Jul 22, 2009 |
| Suse | — | Upgrade libidl-32bitUpgrade gconf2-32bitUpgrade gconf2Upgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192-x86Upgrade orbit2Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nssUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-translationsUpgrade libidl-x86Upgrade mozilla-xulrunner192Upgrade MozillaFirefoxUpgrade libfreebl3-x86Upgrade mozilla-nss-toolsUpgrade libfreebl3-32bitUpgrade mozilla-xulrunner191-x86Upgrade libidlUpgrade MozillaFirefox-translationsUpgrade libfreebl3Upgrade mozilla-nss-x86Upgrade orbit2-32bitUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner191Upgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-nss-32bitUpgrade mozilla-nspr-x86Upgrade gconf2-x86Upgrade mozilla-xulrunner190-translationsUpgrade orbit2-x86Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner190Upgrade mozilla-nspr-32bitUpgrade mozilla-nsprUpgrade MozillaFirefox-branding-SLED | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade firefox-3.0Upgrade abrowser | Nov 8, 2024 | Jul 22, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub