Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JavaScript code.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade seamonkeyUpgrade linux-firefoxUpgrade firefoxUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade linux-thunderbird | Dec 10, 2025 | Dec 14, 2013 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade dev-libs/nspr.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Dec 11, 2013 |
| Mfsa2013 110 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 26.0 | Dec 12, 2013 | Dec 10, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.23.0 | Dec 8, 2014 | Dec 11, 2013 |
| Oracle Solaris | — | Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Dec 11, 2013 |
| Suse | — | Upgrade mozilla-xulrunner191-translationsUpgrade firefox-gtk2-32bitUpgrade mozilla-nssUpgrade firefox-glib2-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade seamonkeyUpgrade mozillafirefox-branding-upstreamUpgrade seamonkey-venkmanUpgrade firefox-pango-32bitUpgrade firefox-pcreUpgrade MozillaFirefox-branding-SLEDUpgrade libfreebl3Upgrade libfreebl3-32bitUpgrade MozillaFirefox-translationsUpgrade firefox-cairo-32bitUpgrade firefox-fontconfigUpgrade firefox-pixmanUpgrade firefox-gtk2Upgrade mozilla-nspr-develUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-nspr-32bitUpgrade firefox-cairoUpgrade seamonkey-translations-commonUpgrade MozillaFirefox-translations-commonUpgrade seamonkey-dom-inspectorUpgrade mozilla-xulrunner192-translations-32bitUpgrade firefox-pangoUpgrade mozilla-nsprUpgrade libsoftokn3-x86Upgrade firefox-pcre-32bitUpgrade firefox-libgcc_s1Upgrade firefox-gtk2-langUpgrade firefox-freetype2-32bitUpgrade mozilla-xulrunner191-translations-32bitUpgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade mozilla-nss-develUpgrade firefox-pixman-32bitUpgrade firefox-glib2Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade firefox-libstdc++6-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-toolsUpgrade libsoftokn3Upgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade sle-sdk-releaseUpgrade seamonkey-ircUpgrade mozilla-nss-x86Upgrade firefox-atk-32bitUpgrade firefox-libstdc++6Upgrade firefox-freetype2Upgrade libsoftokn3-32bitUpgrade MozillaFirefox-develUpgrade seamonkey-translations-otherUpgrade libfreebl3-x86Upgrade mozillafirefox-buildsymbolsUpgrade firefox-libgcc_s1-32bitUpgrade firefox-fontconfig-32bitUpgrade MozillaFirefoxUpgrade mozilla-xulrunner191Upgrade firefox-atk | Feb 17, 2015 | Dec 11, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Dec 11, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub