Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a multipart/x-mixed-replace image.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-develUpgrade xulrunnerUpgrade seamonkey-chatUpgrade seamonkey-develUpgrade seamonkey-mailUpgrade seamonkey-js-debuggerUpgrade seamonkey-dom-inspectorUpgrade seamonkeyUpgrade thunderbirdUpgrade firefox | Dec 1, 2016 | Jun 30, 2011 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey.Upgrade www-client/icecat.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Jun 30, 2011 |
| Mfsa2011 21 | — | Upgrade to Mozilla Firefox version 5.0Upgrade to Mozilla Firefox version 3.6.18 | Jun 14, 2012 | Jun 30, 2011 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.2.0 | Feb 3, 2012 | Jun 30, 2011 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.11 | Feb 22, 2012 | Jun 30, 2011 |
| Oracle_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade xulrunner-develUpgrade xulrunner | Oct 16, 2024 | Jun 30, 2011 |
| Suse | — | Upgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192Upgrade MozillaThunderbird-translations-commonUpgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-gnome-32bitUpgrade MozillaFirefoxUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner192-translations | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefoxUpgrade xulrunner-1.9.2 | Nov 8, 2024 | Jun 30, 2011 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub