Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-dom-inspectorUpgrade firefoxUpgrade xulrunner-develUpgrade seamonkey-nssUpgrade seamonkey-js-debuggerUpgrade seamonkeyUpgrade seamonkey-mailUpgrade thunderbirdUpgrade seamonkey-nspr-develUpgrade seamonkey-nss-develUpgrade seamonkey-chatUpgrade seamonkey-nsprUpgrade xulrunnerUpgrade seamonkey-devel | Dec 1, 2016 | Jul 30, 2010 |
| Freebsd | — | Upgrade linux-firefoxUpgrade firefoxUpgrade linux-firefox-develUpgrade thunderbirdUpgrade seamonkey | Dec 10, 2025 | Jul 21, 2010 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade dev-libs/nss.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox.Upgrade www-client/seamonkey. | Oct 30, 2017 | Jul 30, 2010 |
| Mfsa2010 37 | — | Upgrade to Mozilla Firefox version 3.5.11Upgrade to Mozilla Firefox version 3.6.7 | Jun 14, 2012 | Jul 30, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.6 | Feb 3, 2012 | Jul 30, 2010 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Jul 30, 2010 |
| Suse | — | Upgrade MozillaFirefoxUpgrade orbit2Upgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-32bitUpgrade libidl-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-gnomeUpgrade libfreebl3Upgrade mozilla-xulrunner191-32bitUpgrade mozilla-nspr-x86Upgrade mozilla-xulrunner191-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-nsprUpgrade mozilla-xulrunner190-translationsUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-develUpgrade orbit2-32bitUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner191-translationsUpgrade libfreebl3-32bitUpgrade MozillaFirefox-translations-otherUpgrade libidlUpgrade mozilla-nssUpgrade mozilla-nss-x86Upgrade libidl-x86Upgrade mozilla-xulrunner192-gnome-32bitUpgrade gconf2Upgrade mozilla-xulrunner191-gnomevfsUpgrade gconf2-32bitUpgrade mozilla-xulrunner192-translations-32bitUpgrade libfreebl3-x86Upgrade mozilla-nss-toolsUpgrade gconf2-x86Upgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner190-x86Upgrade orbit2-x86 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefox-3.5Upgrade firefoxUpgrade xulrunner-1.9.2Upgrade abrowserUpgrade firefox-3.0 | Nov 8, 2024 | Jul 30, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub