Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkeyUpgrade seamonkey-mailUpgrade thunderbirdUpgrade seamonkey-js-debuggerUpgrade seamonkey-dom-inspectorUpgrade xulrunner-develUpgrade firefoxUpgrade seamonkey-nssUpgrade xulrunnerUpgrade seamonkey-develUpgrade seamonkey-nss-develUpgrade seamonkey-nsprUpgrade seamonkey-nspr-develUpgrade seamonkey-chat | Dec 1, 2016 | Jul 30, 2010 |
| Freebsd | — | Upgrade linux-firefoxUpgrade thunderbirdUpgrade linux-firefox-develUpgrade seamonkeyUpgrade firefox | Dec 10, 2025 | Jul 21, 2010 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/icecat.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox.Upgrade mail-client/mozilla-thunderbird. | Oct 30, 2017 | Jul 30, 2010 |
| Mfsa2010 37 | — | Upgrade to Mozilla Firefox version 3.5.11Upgrade to Mozilla Firefox version 3.6.7 | Jun 14, 2012 | Jul 30, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.6 | Feb 3, 2012 | Jul 30, 2010 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Jul 30, 2010 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner191-gnomevfsUpgrade libfreebl3-x86Upgrade mozilla-xulrunner192-gnome-32bitUpgrade libfreebl3-32bitUpgrade gconf2-x86Upgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner190-x86Upgrade libidlUpgrade mozilla-nss-32bitUpgrade mozilla-nssUpgrade mozilla-xulrunner191-translationsUpgrade gconf2-32bitUpgrade mozilla-xulrunner191Upgrade mozilla-nss-toolsUpgrade gconf2Upgrade mozilla-nss-x86Upgrade libidl-x86Upgrade orbit2-x86Upgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-gnomevfsUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner192Upgrade orbit2Upgrade libidl-32bitUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-nsprUpgrade mozilla-xulrunner192-develUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefoxUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-nspr-x86Upgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner191-x86Upgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner192-gnomeUpgrade libfreebl3Upgrade orbit2-32bit | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade firefox-3.0Upgrade firefoxUpgrade firefox-3.5Upgrade xulrunner-1.9.2 | Nov 8, 2024 | Jul 30, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub