Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-nss-develUpgrade seamonkey-js-debuggerUpgrade xulrunner-develUpgrade seamonkey-nssUpgrade seamonkeyUpgrade xulrunner-devel-unstableUpgrade seamonkey-develUpgrade seamonkey-dom-inspectorUpgrade seamonkey-chatUpgrade seamonkey-nsprUpgrade seamonkey-mailUpgrade seamonkey-nspr-develUpgrade xulrunner | Dec 1, 2016 | Mar 23, 2009 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/icecat. | Oct 30, 2017 | Mar 23, 2009 |
| Mfsa2009 13 | — | Upgrade to Mozilla Firefox version 3.0.8 | Jun 14, 2012 | Mar 23, 2009 |
| Oracle_linux | — | Upgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade xulrunner-devel | Oct 16, 2024 | Mar 23, 2009 |
| Suse | — | Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner191Upgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner190-x86Upgrade orbit2-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner191-translationsUpgrade orbit2Upgrade mozilla-nss-x86Upgrade MozillaFirefoxUpgrade gconf2Upgrade mozilla-xulrunner190-gnomevfsUpgrade libidlUpgrade libfreebl3Upgrade mozilla-xulrunner192Upgrade MozillaFirefox-develUpgrade libfreebl3-x86Upgrade mozilla-nssUpgrade libidl-32bitUpgrade gconf2-32bitUpgrade mozilla-xulrunner192-x86Upgrade orbit2-x86Upgrade mozilla-xulrunner191-x86Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner190Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nsprUpgrade mozilla-nspr-32bitUpgrade libidl-x86Upgrade gconf2-x86Upgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefox-translationsUpgrade mozilla-nspr-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade xulrunner-1.9Upgrade firefoxUpgrade firefox-3.0 | Nov 8, 2024 | Mar 23, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub