Description
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 | openSUSE-SU-2024:10071-1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 | openSUSE-SU-2024:10230-1 |
Advisories 2
- openSUSE-SU-2024:10230-1 MozillaThunderbird-45.5.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10071-1 MozillaFirefox-50.1.0-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- openSUSE-SU-2013:1958 vendor-advisory
- SUSE-SU-2013:1919 vendor-advisory
- openSUSE-SU-2013:1957 vendor-advisory
- FEDORA-2013-23127 vendor-advisory
- FEDORA-2013-23519 vendor-advisory
- 1029470 vdb-entry
- openSUSE-SU-2013:1917 vendor-advisory
- openSUSE-SU-2013:1959 vendor-advisory
- GLSA-201504-01 vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=905903
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- openSUSE-SU-2013:1916 vendor-advisory
- openSUSE-SU-2014:0008 vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=890432
- 1029476 vdb-entry
- openSUSE-SU-2013:1918 vendor-advisory
- FEDORA-2013-23291 vendor-advisory
- USN-2052-1 vendor-advisory
- http://www.mozilla.org/security/announce/2013/mfsa2013-104.html
- FEDORA-2013-23295 vendor-advisory