Mozilla Firefox before 3.0.12 and 3.5 before 3.5.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a Flash object, a slow script dialog, and the unloading of the Flash plugin, which triggers attempted use of a deleted object.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade firefox | Dec 1, 2016 | Jul 22, 2009 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/icecat.Upgrade www-client/firefox-bin.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox-bin. | Oct 30, 2017 | Jul 22, 2009 |
| Mfsa2009 35 | — | Upgrade to Mozilla Firefox version 3.5.1Upgrade to Mozilla Firefox version 3.0.12 | Jun 14, 2012 | Jul 22, 2009 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade xulrunner-devel-unstableUpgrade firefoxUpgrade xulrunner | Oct 16, 2024 | Jul 22, 2009 |
| Suse | — | Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner190Upgrade gconf2Upgrade mozilla-nspr-x86Upgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner191-x86Upgrade orbit2-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-gnomevfsUpgrade libfreebl3Upgrade mozilla-nsprUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade gconf2-x86Upgrade MozillaFirefoxUpgrade orbit2-x86Upgrade libidlUpgrade mozilla-nss-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nss-x86Upgrade libfreebl3-x86Upgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner191-gnomevfsUpgrade libidl-x86Upgrade mozilla-xulrunner192-32bitUpgrade orbit2Upgrade mozilla-xulrunner192Upgrade mozilla-nssUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-translationsUpgrade gconf2-32bitUpgrade libidl-32bit | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade xulrunner-1.9Upgrade firefox-3.0 | Nov 8, 2024 | Jul 22, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub