Description
Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 | openSUSE-SU-2024:10071-1 |
Advisories 1
- openSUSE-SU-2024:10071-1 MozillaFirefox-50.1.0-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- 37699 third-party-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=513981
- 37783 third-party-advisory
- ADV-2009-3558 vdb-entry
- ADV-2009-3547 vdb-entry
- 37881 third-party-advisory
- FEDORA-2009-13362 vendor-advisory
- 37785 third-party-advisory
- 1023333 vdb-entry
- USN-874-1 vendor-advisory
- FEDORA-2009-13333 vendor-advisory
- oval:org.mitre.oval:def:8434 vdb-entry signature
- https://bugzilla.mozilla.org/show_bug.cgi?id=524121
- firefox-javascript-eng-code-exec(54802) vdb-entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=514999
- 37349 vdb-entry
- FEDORA-2009-13366 vendor-advisory
- 37856 third-party-advisory
- http://www.mozilla.org/security/announce/2009/mfsa2009-65.html
- 1023334 vdb-entry
- 37364 vdb-entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=510518
- SUSE-SA:2009:063 vendor-advisory