Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade devhelpUpgrade yelpUpgrade seamonkey-chatUpgrade totem-develUpgrade seamonkey-dom-inspectorUpgrade gnome-python2-extrasUpgrade seamonkey-nsprUpgrade gnome-python2-gtkmozembedUpgrade totemUpgrade gnome-python2-gtkspellUpgrade seamonkey-js-debuggerUpgrade firefoxUpgrade xulrunnerUpgrade seamonkey-nssUpgrade seamonkeyUpgrade seamonkey-nspr-develUpgrade gnome-python2-gtkhtml2Upgrade escUpgrade thunderbirdUpgrade gnome-python2-libeggUpgrade seamonkey-mailUpgrade totem-mozpluginUpgrade devhelp-develUpgrade xulrunner-develUpgrade seamonkey-develUpgrade seamonkey-nss-devel | Dec 1, 2016 | Jun 24, 2010 |
| Freebsd | — | Upgrade seamonkeyUpgrade firefoxUpgrade linux-firefox-develUpgrade thunderbird | Dec 10, 2025 | Jun 23, 2010 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird.Upgrade www-client/icecat.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Jun 24, 2010 |
| Mfsa2010 30 | — | Upgrade to Mozilla Firefox version 3.6.4Upgrade to Mozilla Firefox version 3.5.10 | Jun 14, 2012 | Jun 24, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.5 | Feb 3, 2012 | Jun 24, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.5 | Feb 22, 2012 | Jun 24, 2010 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade escUpgrade totemUpgrade xulrunnerUpgrade devhelp-develUpgrade gnome-python2-gtkmozembedUpgrade gnome-python2-extrasUpgrade yelpUpgrade gnome-python2-gtkspellUpgrade totem-mozpluginUpgrade gnome-python2-gtkhtml2Upgrade firefoxUpgrade totem-develUpgrade devhelpUpgrade gnome-python2-libegg | Oct 16, 2024 | Jun 23, 2010 |
| Suse | — | Upgrade mozilla-xulrunner191-develUpgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner191-gnomevfs-64bitUpgrade mozilla-xulrunner191-64bitUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner191-translations-32bitUpgrade mozillafirefox-translations-otherUpgrade mozilla-xulrunner191-gnomevfsUpgrade sap-aio-releaseUpgrade python-xpcom191Upgrade mozillafirefox-translations-commonUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner191-translations-otherUpgrade mozilla-xulrunner191-translations-commonUpgrade mozillafirefoxUpgrade mozilla-xulrunner191-gnomevfs-32bit | Feb 17, 2015 | Jun 24, 2010 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade abrowserUpgrade thunderbirdUpgrade firefox-3.0Upgrade firefoxUpgrade firefox-3.5 | Nov 8, 2024 | Jun 24, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub