Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG image.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade thunderbird | Dec 1, 2016 | Apr 30, 2014 |
| Freebsd | — | Upgrade seamonkeyUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade firefoxUpgrade firefox-esrUpgrade linux-firefoxUpgrade linux-thunderbird | Dec 10, 2025 | Apr 29, 2014 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade dev-libs/nspr.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Apr 30, 2014 |
| Mfsa2014 37 | — | Upgrade to Mozilla Firefox version 29.0Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 24.5 | Apr 30, 2014 | Apr 29, 2014 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.26.0 | Dec 8, 2014 | Apr 30, 2014 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 24.5Upgrade to the latest version of Mozilla Thunderbird | Apr 30, 2014 | Apr 29, 2014 |
| Oracle Solaris | — | Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.3.0.0.28.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.8.2-0.175.2.5.0.4.0 on Solaris 11.2Upgrade database/sqlite-3 to version 3.8.2-0.175.2.5.0.4.0 on Solaris 11.2Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 24.7.0-0.175.2.5.0.4.0 on Solaris 11.2Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.8.2-0.175.2.5.0.4.0 on Solaris 11.2 | May 29, 2017 | Apr 30, 2014 |
| Oracle_linux | — | Upgrade thunderbirdUpgrade firefox | Oct 16, 2024 | Apr 30, 2014 |
| Suse | — | Upgrade libsoftokn3Upgrade MozillaFirefox-translations-commonUpgrade mozilla-nsprUpgrade libsoftokn3-32bitUpgrade MozillaFirefox-translations-otherUpgrade libfreebl3Upgrade MozillaThunderbird-translations-otherUpgrade mozilla-nss-develUpgrade MozillaFirefox-develUpgrade mozilla-nspr-develUpgrade mozilla-nspr-32bitUpgrade mozilla-nssUpgrade mozilla-nss-toolsUpgrade MozillaThunderbirdUpgrade libfreebl3-x86Upgrade libsoftokn3-x86Upgrade MozillaThunderbird-develUpgrade mozilla-nss-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade libfreebl3-32bitUpgrade mozilla-nspr-x86Upgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-translationsUpgrade mozilla-nss-x86Upgrade MozillaFirefox | Dec 18, 2015 | Apr 30, 2014 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Apr 30, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub