Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an incorrect integer data type as a CSS object reference counter in the CSSValue array (aka nsCSSValue:Array) data structure, which allows remote attackers to execute arbitrary code via a large number of references to a common CSS object, leading to a counter overflow and a free of in-use memory, aka ZDI-CAN-349.

Threat-Mapped Scoring

Score: 1.8

Priority: P4 - Informational (Low)

• S9 – Sabotage of System/App

EPSS

Score: 0.0952
Percentile: 0.9248

CVSS Scoring

Affected Products

• cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*
• cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*

← Back to Home