Buffer overflow in Mozilla Firefox 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG image.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefox | Dec 1, 2016 | Mar 2, 2011 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade linux-firefoxUpgrade linux-firefox-develUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade libxulUpgrade thunderbirdUpgrade firefox | Dec 10, 2025 | Mar 1, 2011 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/icecat. | Oct 30, 2017 | Mar 2, 2011 |
| Mfsa2011 09 | — | Upgrade to Mozilla Firefox version 3.6.14 | Jun 14, 2012 | Mar 2, 2011 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.8 | Feb 22, 2012 | Mar 2, 2011 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade thunderbirdUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Mar 2, 2011 |
| Suse | — | Upgrade mozillathunderbird-translations-otherUpgrade mozilla-xulrunner192-translations-other-32bitUpgrade seamonkey-dom-inspectorUpgrade mozilla-xulrunner192-translations-otherUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-develUpgrade seamonkeyUpgrade mozillathunderbirdUpgrade mozillafirefox-translations-commonUpgrade MozillaThunderbird-buildsymbolsUpgrade mozilla-xulrunner191-develUpgrade seamonkey-translations-commonUpgrade MozillaFirefox-translationsUpgrade enigmailUpgrade mozilla-xulrunner192-gnome-32bitUpgrade sap-aio-releaseUpgrade seamonkey-translations-otherUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-buildsymbolsUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192-translationsUpgrade seamonkey-ircUpgrade mozilla-xulrunner191-translations-32bitUpgrade mozillafirefox-translations-otherUpgrade mozilla-xulrunner191-translations-otherUpgrade mozilla-xulrunner192-translations-commonUpgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner191-translations-commonUpgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade mozillathunderbird-translations-commonUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner191Upgrade python-xpcom191Upgrade seamonkey-venkmanUpgrade mozillafirefoxUpgrade mozilla-js192Upgrade mozilla-js192-32bitUpgrade mozilla-xulrunner192-translations-common-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozillafirefox-branding-upstream | Feb 17, 2015 | Mar 2, 2011 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Mar 2, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub