The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 on Windows does not properly handle long strings, which allows remote attackers to execute arbitrary code via a crafted document.write call that triggers a buffer over-read.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-firefoxUpgrade libxulUpgrade linux-thunderbirdUpgrade seamonkeyUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade firefoxUpgrade linux-firefox-devel | Dec 10, 2025 | Dec 10, 2010 |
| Gentoo Linux | — | Upgrade dev-libs/nss.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner.Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/icecat.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird-bin. | Oct 30, 2017 | Dec 10, 2010 |
| Mfsa2010 75 | — | Upgrade to Mozilla Firefox version 3.5.16Upgrade to Mozilla Firefox version 3.6.13 | Jun 14, 2012 | Dec 10, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.11 | Feb 3, 2012 | Dec 10, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.11Upgrade to Mozilla Thunderbird version 3.1.7 | Feb 22, 2012 | Dec 10, 2010 |
| Suse | — | Upgrade MozillaFirefoxUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-xulrunner192-gnome-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-x86Upgrade MozillaThunderbird-develUpgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-develUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-xulrunner192 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade firefox-3.5Upgrade thunderbirdUpgrade firefoxUpgrade xulrunner-1.9.2Upgrade seamonkey | Nov 19, 2024 | Dec 10, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub