The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly determine the thread for release of an image object, which allows remote attackers to execute arbitrary code or cause a denial of service (race condition and application crash) via a large HTML document containing IMG elements, as demonstrated by the Never-Ending Reddit on reddit.com.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade thunderbirdUpgrade linux-seamonkeyUpgrade firefoxUpgrade seamonkeyUpgrade linux-thunderbirdUpgrade linux-firefox | Dec 10, 2025 | Oct 30, 2013 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin.Upgrade dev-libs/nspr.Upgrade www-client/firefox. | Oct 30, 2017 | Oct 30, 2013 |
| Mfsa2013 97 | — | Upgrade to Mozilla Firefox ESR version 24.1Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 25.0 | Oct 30, 2013 | Oct 29, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.22Upgrade to the latest version of Mozilla SeaMonkey | Dec 8, 2014 | Oct 30, 2013 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 24.1 | Oct 30, 2013 | Oct 29, 2013 |
| Suse | — | Upgrade firefox-pango-32bitUpgrade seamonkey-translations-commonUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozillafirefox-buildsymbolsUpgrade firefox-glib2Upgrade MozillaThunderbird-translations-commonUpgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade seamonkey-translations-otherUpgrade mozilla-nssUpgrade firefox-freetype2Upgrade MozillaThunderbird-develUpgrade mozilla-xulrunner191-translationsUpgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192Upgrade firefox-fontconfig-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade firefox-libstdc++6-32bitUpgrade xulrunnerUpgrade xulrunner-buildsymbolsUpgrade xulrunner-develUpgrade mozilla-js-32bitUpgrade firefox-atkUpgrade seamonkey-ircUpgrade mozilla-nss-32bitUpgrade xulrunner-32bitUpgrade firefox-pcreUpgrade mozilla-xulrunner191-translations-32bitUpgrade firefox-libstdc++6Upgrade enigmailUpgrade seamonkeyUpgrade firefox-cairo-32bitUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-toolsUpgrade firefox-cairoUpgrade seamonkey-dom-inspectorUpgrade mozilla-nss-develUpgrade MozillaThunderbird-buildsymbolsUpgrade MozillaFirefoxUpgrade firefox-pixmanUpgrade MozillaFirefox-translations-commonUpgrade firefox-libgcc_s1Upgrade firefox-gtk2Upgrade mozilla-nspr-develUpgrade firefox-pangoUpgrade mozilla-xulrunner192-translationsUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-atk-32bitUpgrade firefox-glib2-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade MozillaFirefox-develUpgrade firefox-gtk2-32bitUpgrade MozillaThunderbirdUpgrade firefox-fontconfigUpgrade mozilla-nsprUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner192-32bitUpgrade firefox-freetype2-32bitUpgrade firefox-pixman-32bitUpgrade firefox-gtk2-langUpgrade firefox-pcre-32bitUpgrade mozilla-jsUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner191-32bitUpgrade firefox-libgcc_s1-32bitUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner192-gnome | Feb 17, 2015 | Oct 30, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Oct 30, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub