Description
Multiple unspecified vulnerabilities in the layout engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown attack vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | firefox-esr | 45.0esr-1 | — |
| Debian 13 | firefox-esr | 45.0esr-1 | — |
| Debian 12 | firefox-esr | 45.0esr-1 | — |
| Debian 3.1 | mozilla | 2:1.7.8-1sarge10 | DSA-1265-1 |
| Debian 3.1 | mozilla-firefox | 1.0.4-2sarge15 | DSA-1253-1 |
| Debian 3.1 | mozilla-thunderbird | 1.0.2-2.sarge1.0.8e.2 | DSA-1258-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | devhelp +1 | 0.10-0.6.el4 | RHSA-2006:0759 |
| RHEL 4 | firefox +1 | 1.5.0.9-0.1.el4 | RHSA-2006:0760, RHSA-2006:0758 |
| RHEL 4 | seamonkey +5 | 1.0.7-0.1.el4 | RHSA-2006:0759 |
| RHEL 3 | seamonkey +9 | 1.0.7-0.1.el3 | RHSA-2006:0759 |
| RHEL 2 | seamonkey +9 | 1.0.7-0.1.el2 | RHSA-2006:0759 |
Advisories 6
- RHSA-2006:0759 Red Hat Security Advisory: seamonkey security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2006:0760 Red Hat Security Advisory: thunderbird security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2006:0758 Red Hat Security Advisory: firefox security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1258-1 mozilla-thunderbird Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1265-1 mozilla Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1253-1 mozilla-firefox Debian Security (DSA / DLA) · Mar 9, 2026
References
- VU#606260 third-party-advisory
- 21668 vdb-entry
- 23433 third-party-advisory
- 102885 vendor-advisory
- MDKSA-2007:010 vendor-advisory
- 24948 third-party-advisory
- 23439 third-party-advisory
- 23672 third-party-advisory
- ADV-2006-5068 vdb-entry
- 23468 third-party-advisory
- oval:org.mitre.oval:def:11691 vdb-entry signature
- 23598 third-party-advisory
- RHSA-2006:0758 vendor-advisory
- 1017398 vdb-entry
- DSA-1265 vendor-advisory
- 24078 third-party-advisory
- 23692 third-party-advisory
- USN-398-2 vendor-advisory
- GLSA-200701-04 vendor-advisory
- 23282 third-party-advisory
- 24390 third-party-advisory
- http://www.mozilla.org/security/announce/2006/mfsa2006-68.html
- FEDORA-2006-1491 vendor-advisory
- 23422 third-party-advisory
- HPSBUX02153 vendor-advisory
- 23591 third-party-advisory
- 1017405 vdb-entry
- 23614 third-party-advisory
- 1017406 vdb-entry
- RHSA-2006:0759 vendor-advisory
- USN-398-1 vendor-advisory
- ADV-2008-0083 vdb-entry
- FEDORA-2007-004 vendor-advisory
- 23420 third-party-advisory
- 23440 third-party-advisory
- SUSE-SA:2006:080 vendor-advisory
- 20061222 rPSA-2006-0234-1 firefox mailing-list
- VU#427972 third-party-advisory
- 23545 third-party-advisory
- 23618 third-party-advisory
- GLSA-200701-03 vendor-advisory
- TA06-354A third-party-advisory
- 23589 third-party-advisory
- DSA-1253 vendor-advisory
- DSA-1258 vendor-advisory
- https://issues.rpath.com/browse/RPL-883
- 20070102 rPSA-2006-0234-2 firefox thunderbird mailing-list
- SUSE-SA:2007:006 vendor-advisory
- 23601 third-party-advisory
- 23988 third-party-advisory
- MDKSA-2007:011 vendor-advisory
- ADV-2007-1463 vdb-entry
- 23514 third-party-advisory
- GLSA-200701-02 vendor-advisory
- RHSA-2006:0760 vendor-advisory
- USN-400-1 vendor-advisory