| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | ≥ 3.0, < 3.0.18≥ 3.5, < 3.5.8 | 3.0.183.5.8 |
| seamonkey | < 2.0.3 | 2.0.3 |
| thunderbird | < 3.0.2 | 3.0.2 |
The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free