The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser's font and other CSS attributes, and potentially disrupt rendering of a web page, by forcing the browser to perform this erroneous stylesheet caching.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-chatUpgrade xulrunnerUpgrade xulrunner-develUpgrade seamonkey-nspr-develUpgrade seamonkey-js-debuggerUpgrade seamonkey-nssUpgrade seamonkey-dom-inspectorUpgrade firefoxUpgrade seamonkey-nsprUpgrade seamonkey-mailUpgrade seamonkey-nss-develUpgrade xulrunner-devel-unstableUpgrade seamonkey-develUpgrade thunderbirdUpgrade seamonkey | Dec 1, 2016 | Mar 25, 2010 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade www-client/icecat.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey. | Oct 30, 2017 | Mar 25, 2010 |
| Mfsa2010 14 | — | Upgrade to Mozilla Firefox version 3.0.18Upgrade to Mozilla Firefox version 3.6.2Upgrade to Mozilla Firefox version 3.5.8 | Jun 14, 2012 | Mar 25, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.3 | Feb 3, 2012 | Mar 25, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.2 | Feb 22, 2012 | Mar 25, 2010 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade xulrunnerUpgrade xulrunner-devel-unstable | Oct 16, 2024 | Mar 25, 2010 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-gnome-32bitUpgrade MozillaFirefoxUpgrade MozillaFirefox-translationsUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192-32bit | Aug 9, 2024 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.1Upgrade seamonkeyUpgrade firefoxUpgrade xulrunner-1.9Upgrade thunderbird | Nov 19, 2024 | Mar 25, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub