The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (free of unallocated memory) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade xulrunner-develUpgrade xulrunner | Dec 1, 2016 | Apr 3, 2013 |
| Freebsd | — | Upgrade firefoxUpgrade thunderbirdUpgrade linux-thunderbirdUpgrade linux-firefoxUpgrade seamonkeyUpgrade linux-seamonkey | Dec 10, 2025 | Apr 3, 2013 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox. | Oct 30, 2017 | Apr 3, 2013 |
| Mfsa2013 35 | — | Upgrade to Mozilla Firefox version 20.0Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 17.0.5 | Apr 3, 2013 | Apr 2, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.17.0 | Apr 3, 2013 | Apr 2, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 17.0.5Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird ESR version 17.0.5 | Apr 3, 2013 | Apr 2, 2013 |
| Oracle_linux | — | Upgrade thunderbirdUpgrade xulrunner-develUpgrade firefoxUpgrade xulrunner | Oct 16, 2024 | Apr 3, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 2, 2013 |
| Suse | — | Upgrade mozilla-nss-debuginfo-32bitUpgrade mozilla-nspr-debugsourceUpgrade MozillaFirefox-debugsourceUpgrade libsoftokn3-debuginfo-32bitUpgrade mozilla-nspr-develUpgrade MozillaFirefox-translations-commonUpgrade libsoftokn3-32bitUpgrade mozilla-nspr-debuginfo-x86Upgrade mozilla-nss-toolsUpgrade libsoftokn3Upgrade xulrunner-devel-debuginfoUpgrade mozilla-nspr-x86Upgrade seamonkey-ircUpgrade mozilla-js-x86Upgrade mozilla-nss-sysinit-debuginfoUpgrade mozillafirefox-buildsymbolsUpgrade libsoftokn3-x86Upgrade MozillaThunderbird-debugsourceUpgrade sle-sdk-releaseUpgrade mozilla-nss-certs-debuginfo-32bitUpgrade xulrunner-debuginfoUpgrade MozillaFirefox-debuginfoUpgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-develUpgrade mozilla-nss-tools-debuginfoUpgrade seamonkey-translations-otherUpgrade mozilla-jsUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nspr-debuginfoUpgrade xulrunner-debuginfo-x86Upgrade MozillaFirefoxUpgrade mozilla-nss-debugsourceUpgrade mozilla-js-debuginfo-x86Upgrade mozilla-nss-certs-debuginfo-x86Upgrade MozillaThunderbird-devel-debuginfoUpgrade mozilla-js-32bitUpgrade libfreebl3-debuginfoUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-nss-sysinit-x86Upgrade xulrunner-debugsourceUpgrade xulrunner-debuginfo-32bitUpgrade enigmailUpgrade mozilla-nss-sysinitUpgrade MozillaThunderbird-develUpgrade MozillaThunderbirdUpgrade xulrunnerUpgrade mozilla-nspr-64bitUpgrade mozilla-nss-certs-x86Upgrade xulrunner-buildsymbolsUpgrade seamonkey-dom-inspectorUpgrade libfreebl3-debuginfo-32bitUpgrade mozilla-nss-sysinit-debuginfo-x86Upgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbird-buildsymbolsUpgrade libfreebl3Upgrade mozilla-nss-x86Upgrade mozilla-js-debuginfo-32bitUpgrade mozilla-nss-debuginfo-x86Upgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nss-develUpgrade mozilla-nss-certs-debuginfoUpgrade libfreebl3-debuginfo-x86Upgrade seamonkey-translations-commonUpgrade mozilla-nss-certsUpgrade mozilla-nspr-32bitUpgrade mozilla-nspr-debuginfo-32bitUpgrade seamonkey-venkmanUpgrade libfreebl3-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nssUpgrade xulrunner-x86Upgrade mozilla-nss-64bitUpgrade mozilla-js-debuginfoUpgrade seamonkey-debugsourceUpgrade xulrunner-develUpgrade mozilla-nss-certs-32bitUpgrade enigmail-debuginfoUpgrade libfreebl3-32bitUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade MozillaFirefox-translationsUpgrade MozillaThunderbird-debuginfoUpgrade mozilla-nss-debuginfoUpgrade libsoftokn3-debuginfo-x86Upgrade mozilla-nsprUpgrade mozilla-nss-32bitUpgrade libsoftokn3-debuginfoUpgrade seamonkey-debuginfoUpgrade xulrunner-32bitUpgrade seamonkey | Feb 17, 2015 | Apr 3, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Apr 3, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub