The nsWindow implementation in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 does not check the validity of an instance after event dispatching, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, as demonstrated by Mobile Firefox on Android.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade thunderbirdUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade libxulUpgrade firefoxUpgrade seamonkeyUpgrade linux-thunderbird | Dec 10, 2025 | Mar 14, 2012 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird.Upgrade www-client/icecat.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner.Upgrade www-client/firefox.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Mar 14, 2012 |
| Mfsa2012 19 | — | Upgrade to Mozilla Firefox version 3.6.28Upgrade to Mozilla Firefox version 11.0Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 10.0.3 | Jun 14, 2012 | Mar 14, 2012 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.8.0 | Mar 23, 2012 | Mar 14, 2012 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.20Upgrade to Mozilla Thunderbird ESR version 10.0.3Upgrade to Mozilla Thunderbird version 11.0Upgrade to the latest version of Mozilla Thunderbird | Mar 23, 2012 | Mar 14, 2012 |
| Suse | — | Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-develUpgrade MozillaFirefoxUpgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-translationsUpgrade MozillaThunderbirdUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 19, 2024 | Mar 14, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub