The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly allocate memory for unspecified functions, which allows remote attackers to conduct buffer overflow attacks via a crafted web page.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade xulrunnerUpgrade firefoxUpgrade xulrunner-devel | Dec 1, 2016 | Oct 30, 2013 |
| Freebsd | — | Upgrade thunderbirdUpgrade linux-seamonkeyUpgrade firefoxUpgrade seamonkeyUpgrade linux-thunderbirdUpgrade linux-firefox | Dec 10, 2025 | Oct 30, 2013 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nspr.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Oct 30, 2013 |
| Mfsa2013 96 | — | Upgrade to Mozilla Firefox version 25.0Upgrade to Mozilla Firefox ESR version 17.0.10Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 24.1 | Oct 30, 2013 | Oct 29, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.22Upgrade to the latest version of Mozilla SeaMonkey | Dec 8, 2014 | Oct 30, 2013 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 24.1Upgrade to Mozilla Thunderbird ESR version 17.0.10 | Oct 30, 2013 | Oct 29, 2013 |
| Oracle_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade xulrunner-develUpgrade xulrunner | Oct 16, 2024 | Oct 30, 2013 |
| Suse | — | Upgrade seamonkey-translations-otherUpgrade mozilla-nss-develUpgrade firefox-glib2Upgrade firefox-pixmanUpgrade firefox-gtk2-langUpgrade firefox-cairo-32bitUpgrade mozilla-js-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade MozillaThunderbird-translations-otherUpgrade xulrunner-32bitUpgrade firefox-fontconfig-32bitUpgrade mozilla-xulrunner191Upgrade seamonkey-ircUpgrade firefox-pixman-32bitUpgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade mozilla-xulrunner191-32bitUpgrade firefox-libstdc++6-32bitUpgrade enigmailUpgrade MozillaThunderbirdUpgrade mozilla-nspr-develUpgrade firefox-freetype2-32bitUpgrade seamonkey-venkmanUpgrade mozilla-nspr-32bitUpgrade mozilla-jsUpgrade mozilla-xulrunner191-translations-32bitUpgrade firefox-libgcc_s1-32bitUpgrade MozillaFirefox-translations-commonUpgrade firefox-libstdc++6Upgrade firefox-gtk2-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nssUpgrade mozilla-xulrunner192-translations-32bitUpgrade firefox-atk-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade seamonkeyUpgrade firefox-glib2-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-nss-toolsUpgrade MozillaFirefox-develUpgrade firefox-gtk2Upgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbird-develUpgrade MozillaThunderbird-buildsymbolsUpgrade firefox-atkUpgrade firefox-pango-32bitUpgrade firefox-fontconfigUpgrade mozilla-nsprUpgrade MozillaFirefoxUpgrade firefox-cairoUpgrade mozilla-xulrunner192-translationsUpgrade seamonkey-translations-commonUpgrade xulrunner-develUpgrade xulrunner-buildsymbolsUpgrade MozillaFirefox-translationsUpgrade firefox-libgcc_s1Upgrade mozillafirefox-buildsymbolsUpgrade firefox-freetype2Upgrade firefox-pcre-32bitUpgrade seamonkey-dom-inspectorUpgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade xulrunnerUpgrade mozilla-nss-32bitUpgrade firefox-pcreUpgrade firefox-pangoUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner192 | Feb 17, 2015 | Oct 30, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Oct 30, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub