RasterImage.cpp in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 does not prevent access to discarded data, which allows remote attackers to execute arbitrary code or cause a denial of service (incorrect write operations) via crafted image data, as demonstrated by Goo Create.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade firefox | Dec 1, 2016 | Feb 6, 2014 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade linux-firefoxUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade firefoxUpgrade seamonkey | Dec 10, 2025 | Feb 4, 2014 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade dev-libs/nspr.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Feb 6, 2014 |
| Mfsa2014 04 | — | Upgrade to Mozilla Firefox version 27.0Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 24.3 | Feb 5, 2014 | Feb 4, 2014 |
| Mozilla Seamonkey | — | Upgrade to the latest version of Mozilla SeaMonkeyUpgrade to Mozilla SeaMonkey version 2.24 | Dec 8, 2014 | Feb 6, 2014 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 24.3Upgrade to the latest version of Mozilla Thunderbird | Feb 5, 2014 | Feb 4, 2014 |
| Oracle Solaris | — | Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.8.2-0.175.2.5.0.4.0 on Solaris 11.2Upgrade web/browser/firefox to version 24.7.0-0.175.2.5.0.4.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.3.0.0.28.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.8.2-0.175.2.5.0.4.0 on Solaris 11.2Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.8.2-0.175.2.5.0.4.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade thunderbirdUpgrade firefox | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade MozillaThunderbirdUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-develUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-nssUpgrade MozillaFirefox-develUpgrade MozillaThunderbird-develUpgrade mozilla-nss-toolsUpgrade MozillaFirefox-branding-SLEDUpgrade libfreebl3-x86Upgrade MozillaThunderbird-translations-commonUpgrade libsoftokn3Upgrade firefox-libstdc++6Upgrade mozilla-nsprUpgrade firefox-libgcc_s1Upgrade mozilla-nspr-32bitUpgrade libsoftokn3-x86Upgrade MozillaFirefox-translations-commonUpgrade libfreebl3Upgrade libsoftokn3-32bitUpgrade mozilla-nss-x86Upgrade MozillaFirefoxUpgrade mozilla-nss-32bitUpgrade MozillaFirefox-translationsUpgrade libfreebl3-32bit | Dec 18, 2015 | Feb 6, 2014 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Feb 6, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub