The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Buffer overflow in the CharDistributionAnalysis::HandleOneChar function in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted document.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade ca_root_nssUpgrade linux-firefoxUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade libxulUpgrade seamonkeyUpgrade thunderbirdUpgrade firefox | Dec 10, 2025 | Jan 9, 2013 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Jan 13, 2013 |
| Mfsa2013 02 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 18.0Upgrade to Mozilla Firefox ESR version 10.0.12Upgrade to Mozilla Firefox ESR version 17.0.2Upgrade to Mozilla Firefox ESR version 10.0.11 | Jan 14, 2013 | Jan 13, 2013 |
| Mozilla Seamonkey | — | Upgrade to the latest version of Mozilla SeaMonkeyUpgrade to Mozilla SeaMonkey version 2.15 | Jan 10, 2013 | Jan 8, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird ESR version 10.0.12Upgrade to Mozilla Thunderbird ESR version 17.0.2Upgrade to Mozilla Thunderbird version 17.0.2Upgrade to the latest version of Mozilla Thunderbird | Jan 10, 2013 | Jan 8, 2013 |
| Suse | — | Upgrade libfreebl3Upgrade xulrunner-debuginfoUpgrade mozilla-nspr-debuginfo-32bitUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbird-debuginfoUpgrade mozilla-js-32bitUpgrade seamonkey-venkmanUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-debugsourceUpgrade firefox3-gtk2-32bitUpgrade mozilla-nss-x86Upgrade libsoftokn3-32bitUpgrade mozilla-nss-sysinitUpgrade libfreebl3-debuginfoUpgrade sle-sdk-releaseUpgrade mozilla-nss-sysinit-32bitUpgrade MozillaThunderbird-buildsymbolsUpgrade seamonkey-translations-otherUpgrade xulrunner-debugsourceUpgrade MozillaFirefox-develUpgrade MozillaThunderbird-translations-otherUpgrade seamonkey-debugsourceUpgrade mozilla-nss-toolsUpgrade xulrunner-debuginfo-32bitUpgrade mozilla-nsprUpgrade seamonkey-dom-inspectorUpgrade libfreebl3-debuginfo-x86Upgrade mozilla-nspr-develUpgrade MozillaThunderbirdUpgrade mozilla-jsUpgrade mozilla-nss-64bitUpgrade libsoftokn3Upgrade mozilla-nss-develUpgrade firefox3-cairoUpgrade enigmailUpgrade seamonkeyUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nss-sysinit-x86Upgrade mozilla-nss-tools-debuginfoUpgrade mozilla-nss-debuginfoUpgrade mozilla-nspr-64bitUpgrade MozillaFirefox-debugsourceUpgrade mozilla-js-x86Upgrade xulrunner-debuginfo-x86Upgrade mozilla-nss-certsUpgrade enigmail-debuginfoUpgrade mozilla-nss-sysinit-debuginfo-x86Upgrade libfreebl3-32bitUpgrade xulrunner-develUpgrade libsoftokn3-debuginfo-32bitUpgrade mozilla-nspr-x86Upgrade libfreebl3-x86Upgrade mozilla-nss-debuginfo-32bitUpgrade xulrunner-32bitUpgrade xulrunner-devel-debuginfoUpgrade MozillaThunderbird-devel-debuginfoUpgrade mozillafirefox-branding-upstreamUpgrade libsoftokn3-debuginfoUpgrade mozilla-nss-debuginfo-x86Upgrade libsoftokn3-x86Upgrade MozillaThunderbird-develUpgrade mozilla-nspr-debugsourceUpgrade firefox3-cairo-32bitUpgrade mozilla-js-debuginfo-x86Upgrade mozilla-nss-certs-debuginfo-32bitUpgrade MozillaFirefox-debuginfoUpgrade mozillafirefox-buildsymbolsUpgrade seamonkey-ircUpgrade mozilla-js-debuginfoUpgrade firefox3-pango-32bitUpgrade libsoftokn3-debuginfo-x86Upgrade seamonkey-translations-commonUpgrade mozilla-nss-certs-debuginfo-x86Upgrade mozilla-nss-certs-debuginfoUpgrade MozillaThunderbird-translations-commonUpgrade libfreebl3-debuginfo-32bitUpgrade mozilla-nss-certs-x86Upgrade mozilla-nss-certs-32bitUpgrade mozilla-nspr-debuginfo-x86Upgrade xulrunnerUpgrade mozilla-js-debuginfo-32bitUpgrade mozilla-nspr-debuginfoUpgrade seamonkey-debuginfoUpgrade MozillaFirefox-translationsUpgrade xulrunner-x86Upgrade mozilla-nss-32bitUpgrade MozillaFirefoxUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade firefox3-gtk2Upgrade xulrunner-buildsymbolsUpgrade MozillaThunderbird-debugsourceUpgrade mozilla-nss-sysinit-debuginfoUpgrade firefox3-pangoUpgrade mozilla-nss | Feb 17, 2015 | Jan 13, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Jan 13, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub