The nsSOCKSSocketInfo::ConnectToProxy function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not ensure thread safety for SSL sessions, which allows remote attackers to execute arbitrary code via crafted data, as demonstrated by e-mail message data.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-firefoxUpgrade seamonkeyUpgrade ca_root_nssUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade firefoxUpgrade linux-seamonkeyUpgrade libxul | Dec 10, 2025 | Jan 9, 2013 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Jan 13, 2013 |
| Mfsa2013 07 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 17.0.2Upgrade to Mozilla Firefox version 18.0 | Jan 14, 2013 | Jan 13, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.15.0 | Jan 10, 2013 | Jan 8, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird ESR version 17.0.2Upgrade to Mozilla Thunderbird version 17.0.2Upgrade to the latest version of Mozilla Thunderbird | Jan 10, 2013 | Jan 8, 2013 |
| Suse | — | Upgrade libsoftokn3-x86Upgrade MozillaThunderbird-devel-debuginfoUpgrade mozilla-nss-x86Upgrade seamonkey-debugsourceUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade xulrunner-buildsymbolsUpgrade mozilla-nss-certs-debuginfo-x86Upgrade MozillaFirefox-translationsUpgrade firefox3-pango-32bitUpgrade libsoftokn3Upgrade mozilla-js-debuginfo-32bitUpgrade MozillaThunderbird-develUpgrade xulrunner-32bitUpgrade mozilla-nspr-x86Upgrade mozilla-nss-debuginfo-x86Upgrade seamonkey-translations-commonUpgrade MozillaFirefoxUpgrade libsoftokn3-debuginfo-x86Upgrade mozilla-nss-develUpgrade mozilla-nss-toolsUpgrade firefox3-gtk2-32bitUpgrade libfreebl3-debuginfo-x86Upgrade xulrunner-x86Upgrade mozilla-nss-certsUpgrade mozilla-nspr-debuginfo-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-js-debuginfoUpgrade MozillaFirefox-debuginfoUpgrade xulrunner-debuginfo-32bitUpgrade seamonkey-venkmanUpgrade mozilla-nss-debuginfoUpgrade mozilla-nss-sysinit-debuginfoUpgrade firefox3-gtk2Upgrade mozilla-nss-certs-x86Upgrade mozilla-nss-certs-debuginfo-32bitUpgrade mozilla-nss-certs-debuginfoUpgrade libfreebl3-x86Upgrade MozillaThunderbird-translations-commonUpgrade mozilla-nss-sysinit-debuginfo-x86Upgrade mozilla-nss-debugsourceUpgrade mozillafirefox-buildsymbolsUpgrade xulrunnerUpgrade mozilla-nspr-debugsourceUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-32bitUpgrade MozillaFirefox-debugsourceUpgrade xulrunner-develUpgrade libfreebl3Upgrade seamonkey-translations-otherUpgrade firefox3-cairo-32bitUpgrade enigmail-debuginfoUpgrade libfreebl3-32bitUpgrade mozilla-js-debuginfo-x86Upgrade mozilla-nspr-debuginfoUpgrade MozillaThunderbird-debuginfoUpgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nspr-32bitUpgrade MozillaThunderbirdUpgrade libfreebl3-debuginfoUpgrade seamonkeyUpgrade seamonkey-debuginfoUpgrade enigmailUpgrade mozilla-nspr-debuginfo-32bitUpgrade mozillafirefox-branding-upstreamUpgrade sle-sdk-releaseUpgrade libsoftokn3-32bitUpgrade firefox3-cairoUpgrade seamonkey-ircUpgrade mozilla-js-32bitUpgrade mozilla-nssUpgrade mozilla-nspr-develUpgrade MozillaThunderbird-buildsymbolsUpgrade mozilla-nspr-64bitUpgrade seamonkey-dom-inspectorUpgrade mozilla-jsUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translations-commonUpgrade xulrunner-debuginfo-x86Upgrade firefox3-pangoUpgrade MozillaThunderbird-debugsourceUpgrade mozilla-js-x86Upgrade MozillaThunderbird-translations-otherUpgrade xulrunner-devel-debuginfoUpgrade xulrunner-debugsourceUpgrade mozilla-nss-debuginfo-32bitUpgrade mozilla-nss-sysinit-x86Upgrade mozilla-nss-sysinitUpgrade libsoftokn3-debuginfo-32bitUpgrade mozilla-nss-tools-debuginfoUpgrade mozilla-nss-64bitUpgrade libsoftokn3-debuginfoUpgrade mozilla-nsprUpgrade libfreebl3-debuginfo-32bitUpgrade MozillaFirefox-develUpgrade xulrunner-debuginfo | Feb 17, 2015 | Jan 13, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Jan 13, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub