Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-nss-develUpgrade totem-mozpluginUpgrade seamonkey-js-debuggerUpgrade seamonkey-nssUpgrade seamonkey-develUpgrade seamonkeyUpgrade gnome-python2-gtkhtml2Upgrade escUpgrade xulrunnerUpgrade xulrunner-develUpgrade seamonkey-nspr-develUpgrade devhelp-develUpgrade seamonkey-mailUpgrade gnome-python2-libeggUpgrade firefoxUpgrade thunderbirdUpgrade gnome-python2-gtkmozembedUpgrade seamonkey-nsprUpgrade gnome-python2-extrasUpgrade yelpUpgrade seamonkey-chatUpgrade totem-develUpgrade devhelpUpgrade gnome-python2-gtkspellUpgrade seamonkey-dom-inspectorUpgrade totem | Dec 1, 2016 | Jun 24, 2010 |
| Freebsd | — | Upgrade firefoxUpgrade linux-firefox-develUpgrade thunderbirdUpgrade seamonkey | Dec 10, 2025 | Jun 23, 2010 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/icecat.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Jun 24, 2010 |
| Mfsa2010 30 | — | Upgrade to Mozilla Firefox version 3.5.10Upgrade to Mozilla Firefox version 3.6.4 | Jun 14, 2012 | Jun 24, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.5 | Feb 3, 2012 | Jun 24, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.5 | Feb 22, 2012 | Jun 24, 2010 |
| Oracle_linux | — | Upgrade gnome-python2-gtkspellUpgrade totem-develUpgrade yelpUpgrade totem-mozpluginUpgrade gnome-python2-extrasUpgrade firefoxUpgrade gnome-python2-libeggUpgrade devhelpUpgrade gnome-python2-gtkmozembedUpgrade gnome-python2-gtkhtml2Upgrade xulrunner-develUpgrade xulrunnerUpgrade escUpgrade devhelp-develUpgrade totem | Oct 16, 2024 | Jun 23, 2010 |
| Suse | — | Upgrade MozillaThunderbird-translations-otherUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner192Upgrade libidl-x86Upgrade orbit2Upgrade mozilla-xulrunner192-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner191-32bitUpgrade libfreebl3Upgrade libfreebl3-x86Upgrade gconf2-32bitUpgrade MozillaThunderbird-develUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-nssUpgrade mozilla-xulrunner190-gnomevfsUpgrade MozillaFirefox-develUpgrade gconf2Upgrade gconf2-x86Upgrade mozilla-xulrunner192-develUpgrade orbit2-32bitUpgrade mozilla-xulrunner191-translationsUpgrade orbit2-x86Upgrade MozillaThunderbird-translations-commonUpgrade mozilla-nss-toolsUpgrade mozilla-nspr-x86Upgrade mozilla-xulrunner192-32bitUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nss-32bitUpgrade mozilla-nss-x86Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nsprUpgrade MozillaThunderbirdUpgrade libfreebl3-32bitUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner190Upgrade libidlUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefox-translationsUpgrade MozillaFirefoxUpgrade libidl-32bit | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade xulrunner-1.9.2Upgrade thunderbirdUpgrade firefoxUpgrade firefox-3.5Upgrade firefox-3.0 | Nov 8, 2024 | Jun 24, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub