layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter frames, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nsprUpgrade nspr-develUpgrade firefox | Dec 1, 2016 | Oct 29, 2009 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade firefox | Dec 10, 2025 | Oct 28, 2009 |
| Gentoo Linux | — | Upgrade www-client/icecat.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nss.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/mozilla-thunderbird-bin. | Oct 30, 2017 | Oct 29, 2009 |
| Mfsa2009 64 | — | Upgrade to Mozilla Firefox version 3.5.4Upgrade to Mozilla Firefox version 3.0.15 | Jun 14, 2012 | Oct 29, 2009 |
| Oracle_linux | — | Upgrade nsprUpgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade nspr-develUpgrade firefoxUpgrade xulrunner-devel | Oct 16, 2024 | Oct 29, 2009 |
| Suse | — | Upgrade mozilla-xulrunner191Upgrade orbit2-x86Upgrade gconf2Upgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner192-x86Upgrade libidl-x86Upgrade gconf2-32bitUpgrade orbit2-32bitUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner190-gnomevfsUpgrade libfreebl3-x86Upgrade mozilla-xulrunner191-gnomevfsUpgrade MozillaFirefox-branding-SLEDUpgrade orbit2Upgrade mozilla-xulrunner191-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-xulrunner190-x86Upgrade mozilla-nssUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-nss-32bitUpgrade libfreebl3-32bitUpgrade libfreebl3Upgrade mozilla-nsprUpgrade mozilla-xulrunner192Upgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-nss-x86Upgrade libidlUpgrade MozillaFirefoxUpgrade mozilla-xulrunner191-x86Upgrade mozilla-nspr-x86Upgrade gconf2-x86Upgrade libidl-32bitUpgrade mozilla-xulrunner192-translations | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefox-3.5Upgrade firefox-3.0Upgrade xulrunner-1.9Upgrade abrowserUpgrade xulrunner-1.9.1 | Nov 8, 2024 | Oct 29, 2009 |
| Vmsa 2010 0001 1 Update For Service Console Packages Nss And Nspr | — | Upgrade VMware ESX 4.0 to build number 219382 | Sep 2, 2010 | Oct 29, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub