Double free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to execute arbitrary code via "cloned XUL DOM elements which were linked as a parent and child," which are not properly handled during garbage collection.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-mailUpgrade thunderbirdUpgrade seamonkey-develUpgrade seamonkeyUpgrade seamonkey-nss-develUpgrade seamonkey-chatUpgrade seamonkey-nspr-develUpgrade seamonkey-js-debuggerUpgrade firefoxUpgrade firefox-debuginfoUpgrade seamonkey-nsprUpgrade seamonkey-dom-inspectorUpgrade seamonkey-nss | Dec 1, 2016 | Mar 4, 2009 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/icecat. | Oct 30, 2017 | Mar 4, 2009 |
| Mfsa2009 08 | — | Upgrade to Mozilla Firefox version 3.0.7 | Jun 14, 2012 | Mar 4, 2009 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade xulrunner-devel | Oct 16, 2024 | Mar 5, 2009 |
| Suse | — | Upgrade mozilla-nspr-x86Upgrade orbit2-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-nss-x86Upgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nss-32bitUpgrade libidlUpgrade libidl-x86Upgrade mozilla-xulrunner191-translationsUpgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefox-translationsUpgrade gconf2-x86Upgrade mozilla-xulrunner190-x86Upgrade libfreebl3-32bitUpgrade gconf2-32bitUpgrade orbit2-32bitUpgrade mozilla-nssUpgrade gconf2Upgrade mozilla-xulrunner192Upgrade libfreebl3-x86Upgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefoxUpgrade mozilla-xulrunner190-translationsUpgrade libidl-32bitUpgrade mozilla-xulrunner191-32bitUpgrade MozillaFirefox-translations-commonUpgrade libfreebl3Upgrade mozilla-nspr-32bitUpgrade MozillaFirefox-develUpgrade orbit2Upgrade mozilla-nsprUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner191Upgrade mozilla-nss-tools | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade abrowserUpgrade xulrunner-1.9 | Nov 8, 2024 | Mar 5, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub