The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLookup, and (3) MirrorWrappedNativeParent and js_LockGCThingRT.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-devel-unstableUpgrade seamonkey-chatUpgrade seamonkey-dom-inspectorUpgrade seamonkey-nsprUpgrade seamonkey-develUpgrade thunderbirdUpgrade seamonkey-mailUpgrade xulrunner-develUpgrade xulrunnerUpgrade seamonkey-nss-develUpgrade seamonkey-nssUpgrade seamonkeyUpgrade seamonkey-js-debuggerUpgrade firefoxUpgrade seamonkey-nspr-devel | Dec 1, 2016 | Jul 22, 2009 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Jul 22, 2009 |
| Mfsa2009 34 | — | Upgrade to Mozilla Firefox version 3.0.12Upgrade to Mozilla Firefox version 3.5 | Jun 14, 2012 | Jul 22, 2009 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade xulrunner | Oct 16, 2024 | Jul 22, 2009 |
| Suse | — | Upgrade orbit2-x86Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefoxUpgrade mozilla-xulrunner190-translationsUpgrade libfreebl3-x86Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nss-x86Upgrade libidl-x86Upgrade orbit2-32bitUpgrade mozilla-xulrunner191Upgrade libidlUpgrade mozilla-xulrunner190-gnomevfsUpgrade orbit2Upgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner191-translationsUpgrade gconf2Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner191-32bitUpgrade gconf2-32bitUpgrade libidl-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade libfreebl3Upgrade mozilla-nsprUpgrade mozilla-xulrunner192-gnomeUpgrade gconf2-x86Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner190Upgrade mozilla-nssUpgrade mozilla-xulrunner190-x86Upgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner191-x86Upgrade mozilla-nspr-x86Upgrade mozilla-xulrunner192Upgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-32bit | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade abrowserUpgrade xulrunner-1.9 | Nov 8, 2024 | Jul 22, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub