Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkeyUpgrade seamonkey-dom-inspectorUpgrade thunderbirdUpgrade seamonkey-js-debuggerUpgrade seamonkey-mailUpgrade seamonkey-chatUpgrade seamonkey-devel | Dec 1, 2016 | Sep 24, 2008 |
| Freebsd | — | Upgrade linux-firefox-develUpgrade flockUpgrade firefoxUpgrade seamonkeyUpgrade thunderbirdUpgrade linux-flockUpgrade linux-seamonkey-develUpgrade linux-firefoxUpgrade linux-thunderbirdUpgrade linux-seamonkey | Dec 10, 2025 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 37 | — | Upgrade to Mozilla Firefox version 2.0.0.17 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.17 | Feb 22, 2012 | Sep 24, 2008 |
| Suse | — | Upgrade gecko-sdkUpgrade mozilla-xulrunner181-develUpgrade mozillathunderbirdUpgrade mozilla-dom-inspectorUpgrade mozilla-venkmanUpgrade mozilla-deatUpgrade seamonkeyUpgrade seamonkey-dom-inspectorUpgrade MozillaThunderbird-translationsUpgrade mozilla-calendarUpgrade mozilla-xulrunner181-l10nUpgrade mozillaUpgrade mozilla-xulrunner181-64bitUpgrade suse-releaseUpgrade MozillaFirefox-translationsUpgrade seamonkey-venkmanUpgrade mozilla-develUpgrade seamonkey-mailUpgrade mozilla-csUpgrade mozillafirefoxUpgrade mozilla-xulrunner181-32bitUpgrade MozillaThunderbird-develUpgrade seamonkey-spellcheckerUpgrade mozilla-mailUpgrade mozilla-huUpgrade mozilla-xulrunner181Upgrade seamonkey-ircUpgrade mozilla-irc | Feb 17, 2015 | Sep 24, 2008 |
| Ubuntu | — | Upgrade firefoxUpgrade firefox-3.0Upgrade xulrunner-1.9 | Nov 8, 2024 | Sep 24, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub