| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | ≤ 2.0.0.1 | |
| seamonkey | ≤ 1.0.7 | |
| thunderbird | ≤ 1.5.0.9 |
Heap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to execute arbitrary code via a large stroke-width attribute in the clipPath element in an SVG file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free