Stack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code via crafted media content.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade thunderbird | Dec 1, 2016 | Dec 11, 2014 |
| Freebsd | — | Upgrade firefoxUpgrade libxulUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade nssUpgrade firefox-esrUpgrade linux-firefoxUpgrade seamonkey | Dec 10, 2025 | Dec 2, 2014 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade dev-libs/nspr.Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox-bin.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Dec 11, 2014 |
| Mfsa2014 88 | — | Upgrade to Mozilla Firefox ESR version 31.3Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 34.0 | Dec 8, 2014 | Dec 2, 2014 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.31.0 | Dec 11, 2014 | Dec 2, 2014 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 31.3Upgrade to the latest version of Mozilla Thunderbird | Dec 8, 2014 | Dec 2, 2014 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.3.0.0.28.0 on Solaris 11.3Upgrade web/browser/firefox to version 31.6.0-0.175.2.11.0.3.0 on Solaris 11.2Upgrade web/browser/firefox/multi-user-desktop to version 31.6.0-0.175.2.11.0.3.0 on Solaris 11.2Upgrade web/data/firefox-bookmarks to version 31.6.0-0.175.2.11.0.3.0 on Solaris 11.2 | May 29, 2017 | Dec 11, 2014 |
| Oracle_linux | — | Upgrade firefoxUpgrade thunderbird | Oct 16, 2024 | Dec 11, 2014 |
| Redhat_linux | — | — | Jul 9, 2025 | Dec 2, 2014 |
| Suse | — | Upgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbirdUpgrade mozilla-nss-toolsUpgrade libsoftokn3-32bitUpgrade libsoftokn3Upgrade mozilla-nss-develUpgrade MozillaThunderbird-translations-otherUpgrade libsoftokn3-hmacUpgrade mozilla-nss-32bitUpgrade MozillaThunderbird-develUpgrade libfreebl3-hmacUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-nssUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-certsUpgrade MozillaFirefox-translationsUpgrade libfreebl3Upgrade mozillafirefox-branding-sleUpgrade MozillaFirefoxUpgrade libsoftokn3-hmac-32bitUpgrade libfreebl3-hmac-32bitUpgrade libfreebl3-32bit | Dec 18, 2015 | Dec 11, 2014 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Dec 11, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub