Description
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | xulrunner | 1.9.0.16-1 | DSA-1956-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | firefox | 3.0.16-1.el5_4 | RHSA-2009:1674 |
| RHEL 5 | thunderbird | 2.0.0.24-2.el5_4 | RHSA-2010:0153 |
| RHEL 5 | xulrunner +2 | 1.9.0.16-2.el5_4 | RHSA-2009:1674 |
| RHEL 4 | firefox | 3.0.16-4.el4 | RHSA-2009:1674 |
| RHEL 4 | seamonkey +5 | 1.0.9-51.el4_8 | RHSA-2009:1673 |
| RHEL 4 | thunderbird | 1.5.0.12-25.el4 | RHSA-2010:0154 |
| RHEL 3 | seamonkey +9 | 1.0.9-0.48.el3 | RHSA-2009:1673 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Productivity 5 | thunderbird | 2.0.0.24-2.el5_4 | RHSA-2010:0153 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 | openSUSE-SU-2024:10071-1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 | openSUSE-SU-2024:14572-1 |
Advisories 7
- RHSA-2009:1674 Red Hat Security Advisory: firefox security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2010:0154 Red Hat Security Advisory: thunderbird security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2009:1673 Red Hat Security Advisory: seamonkey security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1956-1 xulrunner - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:14572-1 firefox-esr-128.5.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- RHSA-2010:0153 Red Hat Security Advisory: thunderbird security update Red Hat Security Advisories (RHSA) · Jan 14, 2026
- openSUSE-SU-2024:10071-1 MozillaFirefox-50.1.0-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- 37704 third-party-advisory
- RHSA-2010:0153 vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=293347
- 37699 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=546694
- https://bugzilla.mozilla.org/show_bug.cgi?id=479931
- oval:org.mitre.oval:def:10956 vdb-entry signature
- ADV-2009-3547 vdb-entry
- 37703 third-party-advisory
- ADV-2010-0650 vdb-entry
- 37881 third-party-advisory
- mozilla-seamonkey-browser-code-exec(54799) vdb-entry
- FEDORA-2009-13362 vendor-advisory
- 37785 third-party-advisory
- 1023333 vdb-entry
- USN-874-1 vendor-advisory
- 37813 third-party-advisory
- FEDORA-2009-13333 vendor-advisory
- USN-873-1 vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=516237
- RHSA-2010:0154 vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=522374
- 37349 vdb-entry
- RHSA-2009:1674 vendor-advisory
- FEDORA-2009-13366 vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=494617
- DSA-1956 vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=506267
- 37856 third-party-advisory
- http://www.mozilla.org/security/announce/2009/mfsa2009-65.html
- RHSA-2009:1673 vendor-advisory
- 1023334 vdb-entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=515811
- https://bugzilla.mozilla.org/show_bug.cgi?id=457514
- SUSE-SA:2009:063 vendor-advisory
- 37361 vdb-entry
- oval:org.mitre.oval:def:8487 vdb-entry signature