| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | = 10.0= 10.0.1= 10.0.2= 10.0.3= 10.0.4 | |
| thunderbird esr | = 10.0= 10.0.1= 10.0.2= 10.0.3= 10.0.4 |
jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determine data types, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted JavaScript code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free