Description
Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unknown vectors related to the JavaScript engine.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 4.0 | iceape | 1.0.13~pre080614i-0etch1 | DSA-1697-1 |
| Debian 4.0 | icedove | 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614d-0etch1 | DSA-1621-1 |
| Debian 4.0 | iceweasel | 2.0.0.15-0etch1 | DSA-1607-1 |
| Debian 4.0 | xulrunner | 1.8.0.15~pre080614d-0etch1 | DSA-1615-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | devhelp +1 | 0.12-17.el5 | RHSA-2008:0569 |
| RHEL 5 | firefox | 3.0-2.el5 | RHSA-2008:0569 |
| RHEL 5 | thunderbird | 2.0.0.16-1.el5 | RHSA-2008:0616 |
| RHEL 5 | xulrunner +2 | 1.9-1.el5 | RHSA-2008:0569 |
| RHEL 5 | yelp | 2.16.0-19.el5 | RHSA-2008:0569 |
| RHEL 4 | firefox | 1.5.0.12-0.19.el4 | RHSA-2008:0549 |
| RHEL 4 | seamonkey +5 | 1.0.9-16.3.el4_6 | RHSA-2008:0547 |
| RHEL 4 | thunderbird | 1.5.0.12-14.el4 | RHSA-2008:0616 |
| RHEL 3 | seamonkey +9 | 1.0.9-0.20.el3 | RHSA-2008:0547 |
| RHEL 2 | seamonkey +9 | 1.0.9-0.17.el2 | RHSA-2008:0547 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Productivity 5 | thunderbird | 2.0.0.16-1.el5 | RHSA-2008:0616 |
Advisories 8
- RHSA-2008:0569 Red Hat Security Advisory: firefox security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2008:0616 Red Hat Security Advisory: thunderbird security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2008:0549 Red Hat Security Advisory: firefox security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2008:0547 Red Hat Security Advisory: seamonkey security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1697-1 iceape - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1607-1 iceweasel - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1621-1 icedove - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1615-1 xulrunner - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- SUSE-SA:2008:034 vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=380833
- RHSA-2008:0549 vendor-advisory
- DSA-1697 vendor-advisory
- 31021 third-party-advisory
- 30898 third-party-advisory
- 31403 third-party-advisory
- http://wiki.rpath.com/Advisories:rPSA-2008-0216
- https://issues.rpath.com/browse/RPL-2646
- 30949 third-party-advisory
- SSA:2008-191-03 vendor-advisory
- 31069 third-party-advisory
- 31008 third-party-advisory
- 31377 third-party-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=356378
- RHSA-2008:0616 vendor-advisory
- ADV-2008-1993 vdb-entry
- 31023 third-party-advisory
- MDVSA-2008:155 vendor-advisory
- 30038 vdb-entry
- 30915 third-party-advisory
- DSA-1607 vendor-advisory
- GLSA-200808-03 vendor-advisory
- 31005 third-party-advisory
- 33433 third-party-advisory
- FEDORA-2008-6127 vendor-advisory
- 1020419 vdb-entry
- 31253 third-party-advisory
- http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15
- FEDORA-2008-6737 vendor-advisory
- 31183 third-party-advisory
- 30903 third-party-advisory
- RHSA-2008:0547 vendor-advisory
- FEDORA-2008-6193 vendor-advisory
- USN-629-1 vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=431409
- SSA:2008-191 vendor-advisory
- SSA:2008-210-05 vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=418128
- DSA-1615 vendor-advisory
- FEDORA-2008-6706 vendor-advisory
- 31220 third-party-advisory
- 31195 third-party-advisory
- oval:org.mitre.oval:def:10743 vdb-entry signature
- 31076 third-party-advisory
- USN-619-1 vendor-advisory
- 30911 third-party-advisory
- RHSA-2008:0569 vendor-advisory
- http://www.mozilla.org/security/announce/2008/mfsa2008-21.html
- 30878 third-party-advisory
- DSA-1621 vendor-advisory
- 20080708 rPSA-2008-0216-1 firefox mailing-list
- 31286 third-party-advisory
- FEDORA-2008-6196 vendor-advisory
- MDVSA-2008:136 vendor-advisory