The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly initialize data, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via crafted documents.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade xulrunner-develUpgrade xulrunnerUpgrade firefox | Dec 1, 2016 | Oct 30, 2013 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade linux-firefoxUpgrade firefoxUpgrade seamonkey | Dec 10, 2025 | Oct 30, 2013 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade dev-libs/nspr.Upgrade www-client/firefox. | Oct 30, 2017 | Oct 30, 2013 |
| Mfsa2013 95 | — | Upgrade to Mozilla Firefox version 25.0Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 24.1Upgrade to Mozilla Firefox ESR version 17.0.10 | Oct 30, 2013 | Oct 29, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.22.0 | Dec 8, 2014 | Oct 30, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird ESR version 17.0.10Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 24.1 | Oct 30, 2013 | Oct 29, 2013 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade xulrunnerUpgrade thunderbird | Oct 16, 2024 | Oct 30, 2013 |
| Suse | — | Upgrade MozillaThunderbird-translations-otherUpgrade firefox-libgcc_s1-32bitUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-nss-32bitUpgrade firefox-libstdc++6Upgrade firefox-glib2Upgrade firefox-fontconfig-32bitUpgrade firefox-atk-32bitUpgrade seamonkey-translations-otherUpgrade mozilla-xulrunner191-gnomevfsUpgrade firefox-atkUpgrade xulrunner-develUpgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade seamonkey-ircUpgrade MozillaThunderbird-translations-commonUpgrade enigmailUpgrade MozillaFirefox-translations-commonUpgrade firefox-libstdc++6-32bitUpgrade mozilla-nss-toolsUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner191-translations-32bitUpgrade mozilla-nss-develUpgrade xulrunnerUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-jsUpgrade mozilla-xulrunner191Upgrade firefox-pixman-32bitUpgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefoxUpgrade firefox-freetype2Upgrade mozillafirefox-buildsymbolsUpgrade mozilla-js-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nspr-develUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nspr-32bitUpgrade MozillaThunderbirdUpgrade seamonkey-dom-inspectorUpgrade seamonkey-venkmanUpgrade firefox-cairo-32bitUpgrade MozillaThunderbird-buildsymbolsUpgrade firefox-libgcc_s1Upgrade MozillaFirefox-translationsUpgrade firefox-fontconfigUpgrade firefox-pixmanUpgrade firefox-pcre-32bitUpgrade mozilla-nsprUpgrade firefox-gtk2-langUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192Upgrade firefox-glib2-32bitUpgrade mozilla-nssUpgrade firefox-pangoUpgrade xulrunner-32bitUpgrade firefox-cairoUpgrade firefox-freetype2-32bitUpgrade MozillaFirefox-develUpgrade firefox-gtk2Upgrade firefox-pango-32bitUpgrade xulrunner-buildsymbolsUpgrade MozillaFirefox-branding-SLEDUpgrade seamonkey-translations-commonUpgrade mozillafirefox-branding-upstreamUpgrade firefox-pcreUpgrade seamonkeyUpgrade mozilla-xulrunner192-32bitUpgrade firefox-gtk2-32bit | Feb 17, 2015 | Oct 30, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Oct 30, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub