The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Use-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 on Linux, when the Fluendo MP3 plugin for GStreamer is used, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted MP3 file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade firefoxUpgrade thunderbird | Dec 1, 2016 | Apr 1, 2015 |
| Freebsd | — | Upgrade libxulUpgrade seamonkeyUpgrade firefoxUpgrade firefox-esrUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade linux-firefoxUpgrade linux-thunderbird | Dec 10, 2025 | Mar 31, 2015 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Apr 1, 2015 |
| Mfsa2015 31 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 37.0Upgrade to Mozilla Firefox ESR version 31.6 | Apr 2, 2015 | Apr 1, 2015 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.35Upgrade to the latest version of Mozilla SeaMonkey | Oct 22, 2015 | Apr 1, 2015 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 31.6Upgrade to the latest version of Mozilla Thunderbird | Apr 2, 2015 | Apr 1, 2015 |
| Oracle Solaris | — | Upgrade web/browser/firefox to version 31.6.0-0.175.2.11.0.3.0 on Solaris 11.2Upgrade web/data/firefox-bookmarks to version 31.6.0-0.175.2.11.0.3.0 on Solaris 11.2Upgrade web/browser/firefox/multi-user-desktop to version 31.6.0-0.175.2.11.0.3.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.3.0.0.28.0 on Solaris 11.3 | May 29, 2017 | Apr 1, 2015 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade thunderbirdUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Apr 1, 2015 |
| Suse | — | Upgrade MozillaThunderbirdUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-develUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefoxUpgrade MozillaThunderbird-develUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-translations | Dec 18, 2015 | Apr 1, 2015 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Apr 1, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub