The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade seamonkey-mailUpgrade nspr-develUpgrade seamonkey-chatUpgrade nsprUpgrade seamonkeyUpgrade seamonkey-develUpgrade seamonkey-dom-inspectorUpgrade seamonkey-js-debugger | Dec 1, 2016 | Sep 10, 2009 |
| Freebsd | — | Upgrade firefoxUpgrade seamonkeyUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade linux-thunderbird | Dec 10, 2025 | Sep 10, 2009 |
| Gentoo Linux | — | Upgrade dev-libs/nss.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Sep 10, 2009 |
| Mfsa2009 49 | — | Upgrade to Mozilla Firefox version 3.0.14Upgrade to Mozilla Firefox version 3.5.3 | Jun 14, 2012 | Sep 10, 2009 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade nspr-develUpgrade nsprUpgrade firefoxUpgrade xulrunner-develUpgrade xulrunner-devel-unstable | Oct 16, 2024 | Sep 10, 2009 |
| Suse | — | Upgrade mozilla-nsprUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nss-toolsUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-translationsUpgrade mozilla-nss-x86Upgrade mozilla-xulrunner191-x86Upgrade libfreebl3-32bitUpgrade gconf2-x86Upgrade libidlUpgrade MozillaFirefoxUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner192-32bitUpgrade mozilla-nspr-x86Upgrade libidl-32bitUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner191-32bitUpgrade gconf2Upgrade orbit2Upgrade orbit2-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner192Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner192-x86Upgrade MozillaFirefox-develUpgrade libfreebl3-x86Upgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner191-translationsUpgrade libidl-x86Upgrade mozilla-nssUpgrade libfreebl3Upgrade mozilla-xulrunner190-gnomevfsUpgrade gconf2-32bitUpgrade orbit2-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade abrowserUpgrade firefox-3.0Upgrade xulrunner-1.9 | Nov 8, 2024 | Sep 10, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub