The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly initialize data, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via crafted documents.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade xulrunnerUpgrade xulrunner-develUpgrade thunderbird | Dec 1, 2016 | Oct 30, 2013 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade firefoxUpgrade linux-firefoxUpgrade seamonkey | Dec 10, 2025 | Oct 30, 2013 |
| Gentoo Linux | — | Upgrade dev-libs/nspr.Upgrade www-client/firefox.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey. | Oct 30, 2017 | Oct 30, 2013 |
| Mfsa2013 95 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 24.1Upgrade to Mozilla Firefox ESR version 17.0.10Upgrade to Mozilla Firefox version 25.0 | Oct 30, 2013 | Oct 29, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.22.0 | Dec 8, 2014 | Oct 30, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird ESR version 17.0.10Upgrade to Mozilla Thunderbird version 24.1Upgrade to the latest version of Mozilla Thunderbird | Oct 30, 2013 | Oct 29, 2013 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade xulrunnerUpgrade thunderbird | Oct 16, 2024 | Oct 30, 2013 |
| Suse | — | Upgrade MozillaFirefoxUpgrade firefox-atkUpgrade enigmailUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-nspr-develUpgrade mozilla-nss-32bitUpgrade firefox-libstdc++6Upgrade mozilla-xulrunner192-gnome-32bitUpgrade MozillaThunderbird-translations-otherUpgrade firefox-glib2Upgrade MozillaThunderbird-develUpgrade xulrunner-develUpgrade seamonkey-ircUpgrade xulrunnerUpgrade firefox-atk-32bitUpgrade MozillaFirefox-translations-commonUpgrade firefox-freetype2Upgrade MozillaThunderbird-translations-commonUpgrade mozilla-jsUpgrade mozilla-xulrunner191Upgrade mozilla-js-32bitUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-nss-develUpgrade mozilla-xulrunner191-gnomevfsUpgrade firefox-fontconfig-32bitUpgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade firefox-libgcc_s1-32bitUpgrade seamonkey-translations-otherUpgrade firefox-pixman-32bitUpgrade mozilla-xulrunner191-translations-32bitUpgrade firefox-libstdc++6-32bitUpgrade mozilla-xulrunner192-translationsUpgrade seamonkey-dom-inspectorUpgrade xulrunner-buildsymbolsUpgrade firefox-cairo-32bitUpgrade firefox-pixmanUpgrade firefox-gtk2-langUpgrade firefox-fontconfigUpgrade xulrunner-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-translations-32bitUpgrade firefox-glib2-32bitUpgrade MozillaThunderbirdUpgrade mozilla-nssUpgrade mozilla-nspr-32bitUpgrade firefox-cairoUpgrade firefox-freetype2-32bitUpgrade MozillaFirefox-develUpgrade firefox-pangoUpgrade firefox-gtk2-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade firefox-pango-32bitUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-nsprUpgrade seamonkey-translations-commonUpgrade mozilla-xulrunner192Upgrade firefox-pcre-32bitUpgrade firefox-gtk2Upgrade firefox-libgcc_s1Upgrade MozillaFirefox-branding-SLEDUpgrade seamonkey-venkmanUpgrade seamonkeyUpgrade firefox-pcreUpgrade mozillafirefox-branding-upstreamUpgrade MozillaThunderbird-buildsymbols | Feb 17, 2015 | Oct 30, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Oct 30, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub