Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade devhelpUpgrade seamonkey-chatUpgrade totem-develUpgrade totemUpgrade seamonkey-dom-inspectorUpgrade gnome-python2-extrasUpgrade gnome-python2-gtkspellUpgrade yelpUpgrade gnome-python2-gtkmozembedUpgrade seamonkey-nsprUpgrade seamonkey-develUpgrade seamonkey-nspr-develUpgrade firefoxUpgrade totem-mozpluginUpgrade gnome-python2-gtkhtml2Upgrade seamonkey-nssUpgrade seamonkey-js-debuggerUpgrade thunderbirdUpgrade seamonkey-nss-develUpgrade xulrunner-develUpgrade seamonkeyUpgrade seamonkey-mailUpgrade xulrunnerUpgrade escUpgrade devhelp-develUpgrade gnome-python2-libegg | Dec 1, 2016 | Jun 24, 2010 |
| Freebsd | — | Upgrade firefoxUpgrade thunderbirdUpgrade seamonkeyUpgrade linux-firefox-devel | Dec 10, 2025 | Jun 23, 2010 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird-bin.Upgrade www-client/icecat. | Oct 30, 2017 | Jun 24, 2010 |
| Mfsa2010 30 | — | Upgrade to Mozilla Firefox version 3.6.4Upgrade to Mozilla Firefox version 3.5.10 | Jun 14, 2012 | Jun 24, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.5 | Feb 3, 2012 | Jun 24, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.5 | Feb 22, 2012 | Jun 24, 2010 |
| Oracle_linux | — | Upgrade devhelp-develUpgrade xulrunnerUpgrade escUpgrade xulrunner-develUpgrade totemUpgrade yelpUpgrade firefoxUpgrade gnome-python2-gtkhtml2Upgrade gnome-python2-gtkmozembedUpgrade gnome-python2-libeggUpgrade devhelpUpgrade totem-develUpgrade totem-mozpluginUpgrade gnome-python2-gtkspellUpgrade gnome-python2-extras | Oct 16, 2024 | Jun 23, 2010 |
| Suse | — | Upgrade mozilla-xulrunner192-x86Upgrade MozillaThunderbird-develUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner191-32bitUpgrade orbit2-x86Upgrade mozilla-xulrunner192-develUpgrade orbit2-32bitUpgrade libfreebl3Upgrade orbit2Upgrade MozillaFirefox-develUpgrade mozilla-xulrunner192Upgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner191-translationsUpgrade libidl-x86Upgrade gconf2-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade gconf2Upgrade mozilla-nssUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaThunderbird-translations-otherUpgrade gconf2-x86Upgrade libfreebl3-x86Upgrade mozilla-nspr-32bitUpgrade mozilla-nss-x86Upgrade mozilla-xulrunner190-32bitUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-nspr-x86Upgrade MozillaThunderbirdUpgrade mozilla-xulrunner191Upgrade libidl-32bitUpgrade libfreebl3-32bitUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nsprUpgrade libidlUpgrade MozillaFirefoxUpgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefox-translationsUpgrade mozilla-nss-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-xulrunner192-32bit | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade firefoxUpgrade firefox-3.5Upgrade thunderbirdUpgrade xulrunner-1.9.2Upgrade abrowser | Nov 8, 2024 | Jun 24, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub