Description
The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | devhelp +1 | 0.12-10.0.1.el5 | RHSA-2007:0097 |
| RHEL 5 | firefox | 1.5.0.10-2.el5 | RHSA-2007:0097 |
| RHEL 5 | thunderbird | 1.5.0.10-1.el5 | RHSA-2007:0108 |
| RHEL 5 | yelp | 2.16.0-14.0.1.el5 | RHSA-2007:0097 |
| RHEL 4 | devhelp +1 | 0.10-0.7.el4 | RHSA-2007:0077 |
| RHEL 4 | firefox +1 | 1.5.0.10-0.1.el4 | RHSA-2007:0079, RHSA-2007:0078 |
| RHEL 4 | seamonkey +5 | 1.0.8-0.2.el4 | RHSA-2007:0077 |
| RHEL 3 | seamonkey +9 | 1.0.8-0.2.el3 | RHSA-2007:0077 |
| RHEL 2 | seamonkey +9 | 1.0.8-0.2.el2 | RHSA-2007:0077 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | MozillaFirefox | 92.0-1.2 | openSUSE-SU-2024:10600-1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 | openSUSE-SU-2024:14572-1 |
Advisories 7
- RHSA-2007:0097 Red Hat Security Advisory: firefox security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0078 Red Hat Security Advisory: thunderbird security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0079 Red Hat Security Advisory: Firefox security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0077 Red Hat Security Advisory: seamonkey security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- openSUSE-SU-2024:10600-1 MozillaFirefox-92.0-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14572-1 firefox-esr-128.5.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- RHSA-2007:0108 Red Hat Security Advisory: thunderbird security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- RHSA-2007:0078 vendor-advisory
- 24395 third-party-advisory
- VU#269484 third-party-advisory
- 20070226 rPSA-2007-0040-1 firefox mailing-list
- FEDORA-2007-308 vendor-advisory
- 24328 third-party-advisory
- RHSA-2007:0108 vendor-advisory
- GLSA-200703-04 vendor-advisory
- 24252 third-party-advisory
- GLSA-200703-08 vendor-advisory
- SSA:2007-066-03 vendor-advisory
- 24384 third-party-advisory
- 24406 third-party-advisory
- 24457 third-party-advisory
- MDKSA-2007:052 vendor-advisory
- 24343 third-party-advisory
- HPSBUX02153 vendor-advisory
- oval:org.mitre.oval:def:11331 vdb-entry signature
- ADV-2007-0718 vdb-entry
- FEDORA-2007-309 vendor-advisory
- GLSA-200703-18 vendor-advisory
- 24650 third-party-advisory
- USN-428-1 vendor-advisory
- 24320 third-party-advisory
- https://issues.rpath.com/browse/RPL-1103
- mozilla-multiple-javascript-code-execution(32699) vdb-entry
- SUSE-SA:2007:019 vendor-advisory
- ADV-2008-0083 vdb-entry
- 20070303 rPSA-2007-0040-3 firefox thunderbird mailing-list
- SUSE-SA:2007:022 vendor-advisory
- 24293 third-party-advisory
- 24238 third-party-advisory
- SSA:2007-066-04 vendor-advisory
- 24456 third-party-advisory
- 24393 third-party-advisory
- 24342 third-party-advisory
- 24287 third-party-advisory
- 24522 third-party-advisory
- 22694 vdb-entry
- 32115 vdb-entry
- ADV-2007-0719 vdb-entry
- FEDORA-2007-281 vendor-advisory
- http://www.mozilla.org/security/announce/2007/mfsa2007-01.html
- USN-431-1 vendor-advisory
- RHSA-2007:0097 vendor-advisory
- FEDORA-2007-293 vendor-advisory
- 24205 third-party-advisory
- 24389 third-party-advisory
- https://issues.rpath.com/browse/RPL-1081
- 24410 third-party-advisory
- 24333 third-party-advisory
- MDKSA-2007:050 vendor-advisory
- 24290 third-party-advisory
- 24455 third-party-advisory
- RHSA-2007:0077 vendor-advisory
- 1017698 vdb-entry
- SSA:2007-066-05 vendor-advisory
- RHSA-2007:0079 vendor-advisory
- 24437 third-party-advisory