Description
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 | openSUSE-SU-2024:10071-1 |
Advisories 1
- openSUSE-SU-2024:10071-1 MozillaFirefox-50.1.0-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- 37699 third-party-advisory
- oval:org.mitre.oval:def:8503 vdb-entry signature
- ADV-2009-3547 vdb-entry
- 37881 third-party-advisory
- FEDORA-2009-13362 vendor-advisory
- 37785 third-party-advisory
- 1023333 vdb-entry
- USN-874-1 vendor-advisory
- FEDORA-2009-13333 vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=470487
- 37362 vdb-entry
- 37349 vdb-entry
- firefox-browser-eng-code-exec(54800) vdb-entry
- FEDORA-2009-13366 vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=495875
- 37856 third-party-advisory
- http://www.mozilla.org/security/announce/2009/mfsa2009-65.html
- 1023334 vdb-entry
- SUSE-SA:2009:063 vendor-advisory