Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-develUpgrade seamonkey-mailUpgrade seamonkey-nss-develUpgrade seamonkey-js-debuggerUpgrade seamonkey-dom-inspectorUpgrade seamonkey-nssUpgrade seamonkeyUpgrade seamonkey-chatUpgrade seamonkey-nspr-develUpgrade firefoxUpgrade seamonkey-nsprUpgrade thunderbird | Dec 1, 2016 | Apr 5, 2010 |
| Freebsd | — | Upgrade seamonkeyUpgrade linux-firefoxUpgrade firefoxUpgrade thunderbirdUpgrade linux-firefox-develUpgrade linux-f10-nssUpgrade nss | Dec 10, 2025 | Mar 30, 2010 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird.Upgrade www-client/icecat.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Apr 5, 2010 |
| Mfsa2010 19 | — | Upgrade to Mozilla Firefox version 3.6.2Upgrade to Mozilla Firefox version 3.0.19Upgrade to Mozilla Firefox version 3.5.9 | Jun 14, 2012 | Apr 5, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.4 | Feb 3, 2012 | Apr 5, 2010 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade firefoxUpgrade xulrunner-devel-unstableUpgrade xulrunner-devel | Oct 16, 2024 | Apr 5, 2010 |
| Suse | — | Upgrade mozilla-nsprUpgrade mozilla-nssUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-translations-32bitUpgrade gconf2-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192-32bitUpgrade gconf2Upgrade orbit2Upgrade mozilla-xulrunner191-gnomevfsUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-nspr-32bitUpgrade libidl-x86Upgrade mozilla-xulrunner191-x86Upgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefoxUpgrade orbit2-32bitUpgrade orbit2-x86Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner192-x86Upgrade libfreebl3-x86Upgrade mozilla-nss-x86Upgrade mozilla-xulrunner192-gnome-32bitUpgrade MozillaFirefox-translationsUpgrade libidlUpgrade mozilla-nspr-x86Upgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner191Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner192-develUpgrade libfreebl3Upgrade mozilla-xulrunner190-gnomevfsUpgrade libidl-32bitUpgrade mozilla-xulrunner190-translationsUpgrade libfreebl3-32bitUpgrade mozilla-xulrunner190-x86Upgrade gconf2-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade firefox-3.5Upgrade xulrunner-1.9.1Upgrade firefox-3.0Upgrade abrowser | Nov 8, 2024 | Apr 5, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub