Heap-based buffer overflow in the nsTextFrameUtils::TransformText function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via a bidirectional text run.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nss-develUpgrade xulrunner-develUpgrade nss-pkcs11-develUpgrade firefoxUpgrade nss-toolsUpgrade xulrunnerUpgrade nsprUpgrade nssUpgrade nspr-devel | Dec 1, 2016 | Sep 9, 2010 |
| Freebsd | — | Upgrade firefoxUpgrade thunderbirdUpgrade seamonkeyUpgrade libxulUpgrade linux-firefox-develUpgrade linux-firefox | Dec 10, 2025 | Sep 8, 2010 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade dev-libs/nss.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin. | Oct 30, 2017 | Sep 9, 2010 |
| Mfsa2010 53 | — | Upgrade to Mozilla Firefox version 3.6.9Upgrade to Mozilla Firefox version 3.5.12 | Jun 14, 2012 | Sep 9, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.7 | Feb 3, 2012 | Sep 9, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.3Upgrade to Mozilla Thunderbird version 3.0.7 | Feb 22, 2012 | Sep 9, 2010 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade nspr-develUpgrade nss-pkcs11-develUpgrade nssUpgrade nsprUpgrade firefoxUpgrade nss-develUpgrade xulrunner-develUpgrade nss-tools | Oct 16, 2024 | Sep 9, 2010 |
| Suse | — | Upgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner191-x86Upgrade libfreebl3-32bitUpgrade MozillaFirefox-translationsUpgrade libidlUpgrade mozilla-nss-x86Upgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner190-gnomevfsUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nspr-x86Upgrade MozillaFirefoxUpgrade libidl-32bitUpgrade mozilla-xulrunner192-32bitUpgrade orbit2-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-nss-32bitUpgrade mozilla-nsprUpgrade gconf2-x86Upgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner190Upgrade libfreebl3Upgrade libidl-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner190-x86Upgrade orbit2Upgrade libfreebl3-x86Upgrade gconf2-32bitUpgrade MozillaThunderbirdUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner192Upgrade gconf2Upgrade mozilla-xulrunner192-x86Upgrade orbit2-x86Upgrade MozillaThunderbird-translations-otherUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-nss | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.1Upgrade firefox-3.0Upgrade thunderbirdUpgrade abrowserUpgrade firefox-3.5Upgrade firefoxUpgrade xulrunner-1.9.2 | Nov 8, 2024 | Sep 9, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub