The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 on Mac OS X, when the Core Text API is used, does not properly perform certain deletions, which allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via an HTML document containing invisible Unicode characters, as demonstrated by the U+FEFF, U+FFF9, U+FFFA, and U+FFFB characters.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/firefox. | Oct 30, 2017 | Mar 25, 2010 |
| Mfsa2010 11 | — | Upgrade to Mozilla Firefox version 3.5.8Upgrade to Mozilla Firefox version 3.6.2Upgrade to Mozilla Firefox version 3.0.18 | Jun 14, 2012 | Mar 25, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.3 | Feb 3, 2012 | Mar 25, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.2 | Feb 22, 2012 | Mar 25, 2010 |
| Suse | — | Upgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192Upgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-devel | Aug 9, 2024 | Jun 28, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub