The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade xulrunnerUpgrade xulrunner-devel | Dec 1, 2016 | Jan 13, 2013 |
| Freebsd | — | Upgrade seamonkeyUpgrade libxulUpgrade firefoxUpgrade thunderbirdUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade ca_root_nss | Dec 10, 2025 | Jan 9, 2013 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey. | Oct 30, 2017 | Jan 13, 2013 |
| Mfsa2013 02 | — | Upgrade to Mozilla Firefox ESR version 10.0.12Upgrade to Mozilla Firefox ESR version 10.0.11Upgrade to Mozilla Firefox version 18.0Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 17.0.2 | Jan 14, 2013 | Jan 13, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.15Upgrade to the latest version of Mozilla SeaMonkey | Jan 10, 2013 | Jan 8, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 17.0.2Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird ESR version 17.0.2Upgrade to Mozilla Thunderbird ESR version 10.0.12 | Jan 10, 2013 | Jan 8, 2013 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunnerUpgrade thunderbirdUpgrade xulrunner-devel | Oct 16, 2024 | Jan 13, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 8, 2013 |
| Suse | — | Upgrade MozillaThunderbird-debugsourceUpgrade xulrunner-debuginfo-32bitUpgrade MozillaFirefox-translationsUpgrade xulrunner-debugsourceUpgrade mozilla-nspr-debuginfo-32bitUpgrade mozilla-jsUpgrade mozilla-nss-sysinit-32bitUpgrade libsoftokn3-32bitUpgrade MozillaThunderbird-buildsymbolsUpgrade mozilla-nspr-32bitUpgrade libsoftokn3-debuginfoUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-toolsUpgrade seamonkey-debuginfoUpgrade libfreebl3-debuginfo-x86Upgrade xulrunner-buildsymbolsUpgrade MozillaFirefoxUpgrade xulrunner-debuginfo-x86Upgrade mozilla-nspr-x86Upgrade mozilla-nsprUpgrade MozillaFirefox-develUpgrade seamonkey-dom-inspectorUpgrade mozilla-js-x86Upgrade libfreebl3-debuginfo-32bitUpgrade mozilla-nss-sysinitUpgrade MozillaThunderbird-debuginfoUpgrade xulrunner-devel-debuginfoUpgrade mozilla-nss-certs-x86Upgrade mozilla-nss-debuginfo-x86Upgrade mozilla-nss-sysinit-debuginfo-x86Upgrade mozilla-nspr-debuginfo-x86Upgrade mozilla-js-32bitUpgrade MozillaThunderbirdUpgrade seamonkey-translations-otherUpgrade seamonkey-translations-commonUpgrade mozilla-nspr-develUpgrade libsoftokn3-debuginfo-32bitUpgrade mozilla-nss-64bitUpgrade enigmailUpgrade libsoftokn3-x86Upgrade seamonkeyUpgrade libsoftokn3-debuginfo-x86Upgrade xulrunner-x86Upgrade mozilla-nss-debugsourceUpgrade xulrunner-debuginfoUpgrade xulrunner-develUpgrade MozillaFirefox-translations-otherUpgrade mozilla-js-debuginfo-32bitUpgrade mozilla-nspr-64bitUpgrade MozillaFirefox-debugsourceUpgrade mozilla-nss-debuginfoUpgrade mozillafirefox-buildsymbolsUpgrade MozillaThunderbird-develUpgrade mozilla-js-debuginfoUpgrade sle-sdk-releaseUpgrade MozillaThunderbird-devel-debuginfoUpgrade enigmail-debuginfoUpgrade MozillaFirefox-debuginfoUpgrade seamonkey-ircUpgrade mozilla-nss-develUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-certs-debuginfo-32bitUpgrade mozilla-nspr-debugsourceUpgrade libsoftokn3Upgrade libfreebl3-debuginfoUpgrade seamonkey-debugsourceUpgrade mozilla-nss-debuginfo-32bitUpgrade mozilla-nss-sysinit-debuginfoUpgrade libfreebl3-x86Upgrade mozilla-nss-x86Upgrade mozilla-nss-32bitUpgrade mozilla-nssUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade mozilla-nss-certs-debuginfoUpgrade mozilla-nspr-debuginfoUpgrade libfreebl3Upgrade mozilla-js-debuginfo-x86Upgrade MozillaThunderbird-translations-otherUpgrade mozilla-nss-certs-debuginfo-x86Upgrade seamonkey-venkmanUpgrade xulrunner-32bitUpgrade libfreebl3-32bitUpgrade xulrunnerUpgrade mozilla-nss-tools-debuginfoUpgrade mozilla-nss-certsUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-nss-sysinit-x86Upgrade MozillaThunderbird-translations-common | Feb 17, 2015 | Jan 13, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Jan 13, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub