Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-nsprUpgrade seamonkey-nss-develUpgrade seamonkey-develUpgrade xulrunnerUpgrade seamonkey-nspr-develUpgrade seamonkey-chatUpgrade seamonkey-nssUpgrade seamonkey-mailUpgrade firefoxUpgrade seamonkeyUpgrade xulrunner-develUpgrade thunderbirdUpgrade seamonkey-js-debuggerUpgrade seamonkey-dom-inspector | Dec 1, 2016 | Jul 30, 2010 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-firefox-develUpgrade seamonkeyUpgrade thunderbirdUpgrade firefox | Dec 10, 2025 | Jul 21, 2010 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade dev-libs/nss. | Oct 30, 2017 | Jul 30, 2010 |
| Mfsa2010 37 | — | Upgrade to Mozilla Firefox version 3.6.7Upgrade to Mozilla Firefox version 3.5.11 | Jun 14, 2012 | Jul 30, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.6 | Feb 3, 2012 | Jul 30, 2010 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunner-develUpgrade xulrunner | Oct 16, 2024 | Jul 30, 2010 |
| Suse | — | Upgrade seamonkey-venkmanUpgrade mozilla-xulrunner192-translations-otherUpgrade python-xpcom191Upgrade mozillafirefox-translations-otherUpgrade seamonkey-dom-inspectorUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner191-develUpgrade seamonkeyUpgrade mozilla-xulrunner191-translations-commonUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-develUpgrade mozillafirefox-translations-commonUpgrade mozilla-xulrunner192-translations-common-32bitUpgrade sap-aio-releaseUpgrade mozilla-xulrunner192-translations-other-32bitUpgrade mozilla-xulrunner192-buildsymbolsUpgrade seamonkey-translations-commonUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozillafirefoxUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner191-translationsUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-js192Upgrade mozilla-xulrunner192-translations-commonUpgrade seamonkey-translations-otherUpgrade mozilla-js192-32bitUpgrade mozilla-xulrunner191-translations-32bitUpgrade seamonkey-ircUpgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade mozilla-xulrunner191-translations-otherUpgrade mozilla-xulrunner191 | Feb 17, 2015 | Jul 30, 2010 |
| Ubuntu | — | Upgrade firefox-3.5Upgrade firefoxUpgrade xulrunner-1.9.2Upgrade abrowserUpgrade firefox-3.0 | Nov 8, 2024 | Jul 30, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub