Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade thunderbirdUpgrade firefoxUpgrade xulrunner-devel | Dec 1, 2016 | Jan 13, 2013 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade linux-firefoxUpgrade ca_root_nssUpgrade thunderbirdUpgrade firefoxUpgrade seamonkeyUpgrade libxulUpgrade linux-seamonkey | Dec 10, 2025 | Jan 9, 2013 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Jan 13, 2013 |
| Mfsa2013 01 | — | Upgrade to Mozilla Firefox ESR version 17.0.2Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 10.0.12Upgrade to Mozilla Firefox version 18.0 | Jan 14, 2013 | Jan 13, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.15.0 | Jan 10, 2013 | Jan 8, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird ESR version 10.0.12Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 17.0.2Upgrade to Mozilla Thunderbird ESR version 17.0.2 | Jan 10, 2013 | Jan 8, 2013 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade thunderbirdUpgrade firefoxUpgrade xulrunner-devel | Oct 16, 2024 | Jan 13, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 8, 2013 |
| Suse | — | Upgrade libfreebl3-debuginfo-x86Upgrade libfreebl3-debuginfo-32bitUpgrade libsoftokn3Upgrade xulrunner-x86Upgrade mozilla-nss-sysinit-32bitUpgrade MozillaFirefox-translations-otherUpgrade sle-sdk-releaseUpgrade mozilla-nss-debuginfo-x86Upgrade libfreebl3-debuginfoUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-develUpgrade mozilla-nss-certsUpgrade mozilla-nss-sysinit-x86Upgrade seamonkey-debuginfoUpgrade mozilla-nssUpgrade MozillaThunderbird-buildsymbolsUpgrade mozilla-nss-certs-debuginfoUpgrade mozilla-nss-64bitUpgrade MozillaThunderbird-debuginfoUpgrade mozilla-nsprUpgrade xulrunner-develUpgrade libsoftokn3-debuginfoUpgrade seamonkey-translations-commonUpgrade mozilla-nss-x86Upgrade xulrunner-debugsourceUpgrade mozilla-nss-sysinit-debuginfo-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-js-debuginfo-32bitUpgrade seamonkey-venkmanUpgrade libsoftokn3-debuginfo-x86Upgrade seamonkeyUpgrade mozilla-nss-toolsUpgrade mozilla-nspr-debuginfo-32bitUpgrade mozilla-js-debuginfoUpgrade firefox3-cairoUpgrade libfreebl3Upgrade MozillaThunderbird-translations-otherUpgrade mozilla-nss-certs-x86Upgrade mozilla-nss-32bitUpgrade mozilla-nss-debuginfoUpgrade enigmail-debuginfoUpgrade firefox3-gtk2-32bitUpgrade libfreebl3-x86Upgrade xulrunner-32bitUpgrade seamonkey-dom-inspectorUpgrade seamonkey-debugsourceUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-nspr-debuginfoUpgrade xulrunner-debuginfoUpgrade enigmailUpgrade mozilla-js-32bitUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade mozilla-nspr-debuginfo-x86Upgrade firefox3-cairo-32bitUpgrade mozilla-nss-certs-32bitUpgrade MozillaThunderbirdUpgrade libsoftokn3-x86Upgrade seamonkey-translations-otherUpgrade mozilla-nss-debugsourceUpgrade firefox3-pangoUpgrade MozillaFirefox-develUpgrade xulrunner-buildsymbolsUpgrade mozilla-nspr-develUpgrade mozilla-nss-certs-debuginfo-32bitUpgrade MozillaFirefox-translationsUpgrade firefox3-pango-32bitUpgrade libsoftokn3-debuginfo-32bitUpgrade MozillaThunderbird-debugsourceUpgrade mozilla-nspr-x86Upgrade xulrunner-debuginfo-x86Upgrade MozillaFirefox-debugsourceUpgrade MozillaThunderbird-develUpgrade xulrunner-debuginfo-32bitUpgrade mozillafirefox-buildsymbolsUpgrade MozillaFirefox-debuginfoUpgrade libsoftokn3-32bitUpgrade mozilla-js-x86Upgrade xulrunnerUpgrade libfreebl3-32bitUpgrade mozilla-jsUpgrade firefox3-gtk2Upgrade MozillaFirefox-translations-commonUpgrade mozilla-js-debuginfo-x86Upgrade mozilla-nspr-64bitUpgrade mozilla-nss-tools-debuginfoUpgrade mozilla-nss-sysinit-debuginfoUpgrade mozilla-nss-debuginfo-32bitUpgrade mozilla-nss-certs-debuginfo-x86Upgrade seamonkey-ircUpgrade xulrunner-devel-debuginfoUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-nspr-debugsourceUpgrade mozilla-nss-sysinitUpgrade MozillaThunderbird-devel-debuginfoUpgrade MozillaFirefox | Feb 17, 2015 | Jan 13, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Jan 13, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub