Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly handle JavaScript files that contain many functions, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted file that is accessed by debugging APIs, as demonstrated by Firebug.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade xulrunnerUpgrade xulrunner-devel | Dec 1, 2016 | Nov 9, 2011 |
| Freebsd | — | Upgrade thunderbirdUpgrade linux-firefoxUpgrade firefoxUpgrade libxulUpgrade linux-thunderbird | Dec 10, 2025 | Nov 8, 2011 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade net-libs/xulrunner.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Nov 9, 2011 |
| Mfsa2011 49 | — | Upgrade to Mozilla Firefox version 3.6.24Upgrade to Mozilla Firefox version 8.0 | Jun 14, 2012 | Nov 9, 2011 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.5.0 | Feb 3, 2012 | Nov 9, 2011 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.16Upgrade to Mozilla Thunderbird version 8.0 | Feb 22, 2012 | Nov 9, 2011 |
| Oracle Solaris | — | Upgrade web/data/firefox-bookmarks to version 8.0-0.175.0.3.0.4.0 on Solaris 11.0Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 8.0-0.175.0.4.0.3.0 on Solaris 11.0Upgrade web/browser/firefox/multi-user-desktop to version 8.0-0.175.0.3.0.4.0 on Solaris 11.0Upgrade mail/thunderbird to version 8.0-0.175.0.4.0.3.0 on Solaris 11.0Upgrade web/browser/firefox to version 8.0-0.175.0.3.0.4.0 on Solaris 11.0 | May 29, 2017 | Nov 9, 2011 |
| Oracle_linux | — | Upgrade thunderbird | Oct 16, 2024 | Nov 9, 2011 |
| Suse | — | Upgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner192-translationsUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefoxUpgrade mozilla-xulrunner192-gnome-32bitUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-develUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-gnome | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Nov 9, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub