Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade seamonkey-mailUpgrade xulrunner-develUpgrade seamonkeyUpgrade seamonkey-nssUpgrade seamonkey-dom-inspectorUpgrade thunderbirdUpgrade seamonkey-js-debuggerUpgrade seamonkey-nspr-develUpgrade seamonkey-nsprUpgrade seamonkey-chatUpgrade xulrunnerUpgrade seamonkey-develUpgrade seamonkey-nss-devel | Dec 1, 2016 | Jul 30, 2010 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-firefox-develUpgrade thunderbirdUpgrade seamonkeyUpgrade firefox | Dec 10, 2025 | Jul 21, 2010 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner.Upgrade www-client/icecat.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Jul 30, 2010 |
| Mfsa2010 37 | — | Upgrade to Mozilla Firefox version 3.6.7Upgrade to Mozilla Firefox version 3.5.11 | Jun 14, 2012 | Jul 30, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.6 | Feb 3, 2012 | Jul 30, 2010 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade xulrunnerUpgrade firefox | Oct 16, 2024 | Jul 30, 2010 |
| Suse | — | Upgrade mozillafirefoxUpgrade mozilla-js192Upgrade seamonkey-translations-otherUpgrade mozilla-xulrunner191-translations-32bitUpgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade seamonkey-ircUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner192-translations-commonUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner191-translations-otherUpgrade mozilla-js192-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-translations-common-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-buildsymbolsUpgrade mozilla-xulrunner192Upgrade sap-aio-releaseUpgrade mozillafirefox-translations-commonUpgrade mozilla-xulrunner192-translations-other-32bitUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-translations-otherUpgrade mozilla-xulrunner192-develUpgrade seamonkeyUpgrade python-xpcom191Upgrade seamonkey-translations-commonUpgrade mozillafirefox-translations-otherUpgrade seamonkey-dom-inspectorUpgrade seamonkey-venkmanUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner191-translations-commonUpgrade mozilla-xulrunner191-devel | Feb 17, 2015 | Jul 30, 2010 |
| Ubuntu | — | Upgrade firefoxUpgrade firefox-3.5Upgrade xulrunner-1.9.2Upgrade firefox-3.0Upgrade abrowser | Nov 8, 2024 | Jul 30, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub