| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | = 3.5= 3.5.1= 3.5.2= 3.5.3= 3.5.4= 3.5.5= 3.5.6= 3.5.7= 3.5.9= 3.6= 3.6.2= 3.6.3 | |
| seamonkey | = 1.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.0.9= 1.1= 1.1.1= 1.1.10= 1.1.11= 1.1.12= 1.1.13= 1.1.14= 1.1.15= 1.1.16= 1.1.17= 1.1.18= 1.1.19= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.1.7= 1.1.8= 1.1.9= 2.0= 2.0.1= 2.0.2= 2.0.3≤ 2.0.4 | |
| thunderbird | = 0.1= 0.2= 0.3= 0.4= 0.5= 0.6= 0.7= 0.8= 0.9= 1.0= 1.0.2= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.5= 1.5.0.10= 1.5.0.12= 1.5.0.13= 1.5.0.14= 1.5.0.2= 1.5.0.4= 1.5.0.5= 1.5.0.7= 1.5.0.8= 1.5.0.9= 2.0.0.0= 2.0.0.12= 2.0.0.14= 2.0.0.16= 2.0.0.17= 2.0.0.18= 2.0.0.19= 2.0.0.4= 2.0.0.5= 2.0.0.6= 2.0.0.9= 3.0= 3.0.1= 3.0.2= 3.0.3≤ 3.0.4 |
Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value that triggers a heap-based buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free