Heap-based buffer overflow in the nsTextFrameUtils::TransformText function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via a bidirectional text run.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nss-develUpgrade xulrunner-develUpgrade nss-pkcs11-develUpgrade nsprUpgrade nssUpgrade firefoxUpgrade nspr-develUpgrade xulrunnerUpgrade nss-tools | Dec 1, 2016 | Sep 9, 2010 |
| Freebsd | — | Upgrade linux-firefoxUpgrade libxulUpgrade linux-firefox-develUpgrade seamonkeyUpgrade thunderbirdUpgrade firefox | Dec 10, 2025 | Sep 8, 2010 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade dev-libs/nss.Upgrade www-client/seamonkey-bin.Upgrade www-client/icecat.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin. | Oct 30, 2017 | Sep 9, 2010 |
| Mfsa2010 53 | — | Upgrade to Mozilla Firefox version 3.5.12Upgrade to Mozilla Firefox version 3.6.9 | Jun 14, 2012 | Sep 9, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.7 | Feb 3, 2012 | Sep 9, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.3Upgrade to Mozilla Thunderbird version 3.0.7 | Feb 22, 2012 | Sep 9, 2010 |
| Oracle_linux | — | Upgrade nsprUpgrade nssUpgrade nspr-develUpgrade nss-pkcs11-develUpgrade xulrunnerUpgrade nss-develUpgrade firefoxUpgrade nss-toolsUpgrade xulrunner-devel | Oct 16, 2024 | Sep 9, 2010 |
| Suse | — | Upgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner190-x86Upgrade MozillaThunderbird-develUpgrade mozilla-xulrunner192-x86Upgrade libfreebl3-x86Upgrade gconf2-32bitUpgrade mozilla-xulrunner191-32bitUpgrade MozillaThunderbirdUpgrade libidl-x86Upgrade mozilla-xulrunner191-translationsUpgrade libfreebl3Upgrade mozilla-xulrunner192Upgrade orbit2Upgrade orbit2-x86Upgrade gconf2Upgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-nssUpgrade libidlUpgrade mozilla-nss-x86Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner190-translationsUpgrade libidl-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-nsprUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner190Upgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner191Upgrade MozillaFirefoxUpgrade gconf2-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade orbit2-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner191-x86Upgrade mozilla-nss-32bitUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner192-32bitUpgrade libfreebl3-32bitUpgrade mozilla-nspr-x86 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade xulrunner-1.9.2Upgrade thunderbirdUpgrade firefox-3.5Upgrade firefoxUpgrade xulrunner-1.9.1Upgrade firefox-3.0 | Nov 8, 2024 | Sep 9, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub