Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-mailUpgrade thunderbirdUpgrade seamonkeyUpgrade seamonkey-js-debuggerUpgrade seamonkey-dom-inspectorUpgrade seamonkey-chatUpgrade seamonkey-devel | Dec 1, 2016 | Sep 24, 2008 |
| Freebsd | — | Upgrade linux-seamonkey-develUpgrade linux-firefoxUpgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade linux-flockUpgrade linux-firefox-develUpgrade firefoxUpgrade thunderbirdUpgrade flockUpgrade seamonkey | Dec 10, 2025 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/icecat.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 37 | — | Upgrade to Mozilla Firefox version 2.0.0.17 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.17 | Feb 22, 2012 | Sep 24, 2008 |
| Suse | — | Upgrade MozillaThunderbirdUpgrade MozillaFirefoxUpgrade gecko-sdkUpgrade mozilla-dom-inspectorUpgrade mozilla-xulrunner181-l10nUpgrade MozillaThunderbird-translationsUpgrade mozilla-calendarUpgrade mozilla-deatUpgrade mozilla-xulrunner181-64bitUpgrade mozilla-xulrunner181-develUpgrade MozillaFirefox-translationsUpgrade mozilla-venkmanUpgrade mozillaUpgrade suse-releaseUpgrade seamonkey-dom-inspectorUpgrade seamonkeyUpgrade seamonkey-ircUpgrade MozillaThunderbird-develUpgrade mozilla-ircUpgrade seamonkey-mailUpgrade seamonkey-venkmanUpgrade mozilla-csUpgrade mozilla-xulrunner181Upgrade mozilla-develUpgrade mozilla-mailUpgrade seamonkey-spellcheckerUpgrade mozilla-xulrunner181-32bitUpgrade mozilla-hu | Feb 17, 2015 | Sep 24, 2008 |
| Ubuntu | — | Upgrade firefoxUpgrade firefox-3.0Upgrade xulrunner-1.9 | Nov 8, 2024 | Sep 24, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub