| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | ≥ 10.0, < 10.0.7< 15.0 | 10.0.715.0 |
| seamonkey | < 2.12 | 2.12 |
| thunderbird | < 15.0 | 15.0 |
| thunderbird esr | ≥ 10.0, < 10.0.7 | 10.0.7 |
The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 on Linux, when a large number of sampler uniforms are used, does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted web site.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free