Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-mailUpgrade gnome-python2-libeggUpgrade seamonkey-js-debuggerUpgrade seamonkey-nspr-develUpgrade seamonkeyUpgrade thunderbirdUpgrade gnome-python2-gtkhtml2Upgrade totem-mozpluginUpgrade escUpgrade firefoxUpgrade xulrunnerUpgrade xulrunner-develUpgrade seamonkey-nssUpgrade devhelp-develUpgrade seamonkey-develUpgrade seamonkey-nss-develUpgrade devhelpUpgrade gnome-python2-gtkspellUpgrade gnome-python2-gtkmozembedUpgrade seamonkey-nsprUpgrade totem-develUpgrade yelpUpgrade seamonkey-dom-inspectorUpgrade totemUpgrade seamonkey-chatUpgrade gnome-python2-extras | Dec 1, 2016 | Jun 24, 2010 |
| Freebsd | — | Upgrade firefoxUpgrade linux-firefox-develUpgrade thunderbirdUpgrade seamonkey | Dec 10, 2025 | Jun 23, 2010 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/mozilla-firefox.Upgrade www-client/icecat.Upgrade www-client/firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner-bin. | Oct 30, 2017 | Jun 24, 2010 |
| Mfsa2010 30 | — | Upgrade to Mozilla Firefox version 3.5.10Upgrade to Mozilla Firefox version 3.6.4 | Jun 14, 2012 | Jun 24, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.5 | Feb 3, 2012 | Jun 24, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.5 | Feb 22, 2012 | Jun 24, 2010 |
| Oracle_linux | — | Upgrade gnome-python2-gtkspellUpgrade gnome-python2-gtkhtml2Upgrade devhelpUpgrade totem-mozpluginUpgrade gnome-python2-libeggUpgrade totem-develUpgrade gnome-python2-extrasUpgrade yelpUpgrade firefoxUpgrade gnome-python2-gtkmozembedUpgrade escUpgrade xulrunner-develUpgrade devhelp-develUpgrade totemUpgrade xulrunner | Oct 16, 2024 | Jun 23, 2010 |
| Suse | — | Upgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner192-x86Upgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner191-32bitUpgrade gconf2-32bitUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-develUpgrade MozillaThunderbird-develUpgrade libfreebl3Upgrade mozilla-nssUpgrade gconf2-x86Upgrade libidl-x86Upgrade gconf2Upgrade mozilla-xulrunner190-gnomevfsUpgrade libfreebl3-x86Upgrade orbit2Upgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner190-translationsUpgrade MozillaFirefox-branding-SLEDUpgrade orbit2-32bitUpgrade orbit2-x86Upgrade libfreebl3-32bitUpgrade MozillaFirefoxUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner190Upgrade MozillaThunderbird-translations-commonUpgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translationsUpgrade libidlUpgrade mozilla-xulrunner191Upgrade MozillaThunderbirdUpgrade mozilla-nss-toolsUpgrade mozilla-nss-32bitUpgrade mozilla-nspr-x86Upgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192-32bitUpgrade libidl-32bitUpgrade mozilla-nss-x86Upgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nspr | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade abrowserUpgrade thunderbirdUpgrade firefoxUpgrade firefox-3.0Upgrade firefox-3.5 | Nov 8, 2024 | Jun 24, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub