Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS) values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade firefox | Dec 1, 2016 | Jul 30, 2010 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-firefox-develUpgrade seamonkeyUpgrade firefoxUpgrade thunderbird | Dec 10, 2025 | Jul 21, 2010 |
| Gentoo Linux | — | Upgrade www-client/icecat.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Jul 30, 2010 |
| Mfsa2010 39 | — | Upgrade to Mozilla Firefox version 3.6.7Upgrade to Mozilla Firefox version 3.5.11 | Jun 14, 2012 | Jul 30, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.6 | Feb 3, 2012 | Jul 30, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.6Upgrade to Mozilla Thunderbird version 3.1.1 | Feb 22, 2012 | Jul 30, 2010 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade xulrunnerUpgrade firefox | Oct 16, 2024 | Jul 30, 2010 |
| Suse | — | Upgrade seamonkey-dom-inspectorUpgrade mozilla-xulrunner192-buildsymbolsUpgrade mozillathunderbirdUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192-32bitUpgrade sap-aio-releaseUpgrade seamonkey-ircUpgrade mozilla-xulrunner191-develUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192Upgrade enigmailUpgrade mozilla-xulrunner192-translations-other-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade python-xpcom191Upgrade mozillathunderbird-translations-otherUpgrade mozillafirefox-translations-commonUpgrade seamonkey-translations-otherUpgrade mozillathunderbird-translations-commonUpgrade seamonkey-translations-commonUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-gnomeUpgrade seamonkeyUpgrade mozilla-xulrunner192-translations-otherUpgrade mozilla-xulrunner191-translations-commonUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade mozillafirefoxUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-js192Upgrade mozillafirefox-translations-otherUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner191-translations-32bitUpgrade mozilla-xulrunner192-translations-common-32bitUpgrade mozilla-js192-32bitUpgrade mozilla-xulrunner191-translations-otherUpgrade mozilla-xulrunner192-translations-commonUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner191 | Feb 17, 2015 | Jul 30, 2010 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade abrowserUpgrade firefoxUpgrade firefox-3.5Upgrade firefox-3.0Upgrade thunderbird | Nov 8, 2024 | Jul 30, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub