Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libvorbisUpgrade xulrunnerUpgrade libvorbis-develUpgrade xulrunner-develUpgrade firefoxUpgrade libvorbis-devel-docs | Dec 1, 2016 | Feb 1, 2012 |
| Debian | — | Upgrade libvorbisidecUpgrade libvorbis | Jul 30, 2024 | Feb 1, 2012 |
| Freebsd | — | Upgrade libtremor | Dec 10, 2025 | Aug 25, 2015 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/icecat.Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner-bin. | Oct 30, 2017 | Feb 1, 2012 |
| Mfsa2012 07 | — | Upgrade to Mozilla Firefox version 10.0Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 3.6.26 | Jun 14, 2012 | Feb 1, 2012 |
| Mozilla Seamonkey | — | Upgrade to the latest version of Mozilla SeaMonkeyUpgrade to Mozilla SeaMonkey version 2.7 | Feb 3, 2012 | Feb 1, 2012 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 10.0Upgrade to Mozilla Thunderbird version 3.1.18Upgrade to the latest version of Mozilla Thunderbird | Feb 22, 2012 | Feb 1, 2012 |
| Oracle Solaris | — | Upgrade codec/ogg-vorbis to version 2.30.0-0.175.0.8.0.2.0 on Solaris 11.0 | May 29, 2017 | Feb 1, 2012 |
| Oracle_linux | — | Upgrade libvorbis-devel-docsUpgrade xulrunnerUpgrade libvorbis-develUpgrade xulrunner-develUpgrade firefoxUpgrade libvorbis | Apr 6, 2018 | Feb 1, 2012 |
| Suse | — | Upgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaFirefox-develUpgrade libvorbis0-32bitUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192Upgrade libvorbisenc2-x86-64-v3Upgrade MozillaFirefox-translationsUpgrade libvorbis-docUpgrade libvorbisenc2Upgrade libvorbis0Upgrade libvorbisenc2-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefoxUpgrade libvorbisUpgrade libvorbis-develUpgrade mozilla-xulrunner192-gnome-32bitUpgrade MozillaThunderbird-translations-otherUpgrade libvorbisfile3Upgrade mozilla-xulrunner192-translationsUpgrade libvorbis-32bitUpgrade mozilla-xulrunner192-32bitUpgrade libvorbis-x86Upgrade libvorbisfile3-32bitUpgrade libvorbis0-x86-64-v3Upgrade MozillaThunderbird-develUpgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbirdUpgrade libvorbisfile3-x86-64-v3Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-translations-other | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade libvorbis0aUpgrade thunderbirdUpgrade xulrunner-1.9.2 | Nov 8, 2024 | Feb 1, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub