Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade totemUpgrade gnome-python2-gtkspellUpgrade thunderbirdUpgrade seamonkey-nssUpgrade seamonkey-dom-inspectorUpgrade gnome-python2-gtkhtml2Upgrade xulrunner-develUpgrade seamonkeyUpgrade gnome-python2-extrasUpgrade totem-develUpgrade totem-mozpluginUpgrade seamonkey-chatUpgrade gnome-python2-libeggUpgrade devhelpUpgrade yelpUpgrade seamonkey-nspr-develUpgrade escUpgrade seamonkey-nsprUpgrade seamonkey-mailUpgrade seamonkey-develUpgrade gnome-python2-gtkmozembedUpgrade xulrunnerUpgrade seamonkey-nss-develUpgrade seamonkey-js-debuggerUpgrade devhelp-devel | Dec 1, 2016 | Jun 24, 2010 |
| Freebsd | — | Upgrade seamonkeyUpgrade linux-firefox-develUpgrade thunderbirdUpgrade firefox | Dec 10, 2025 | Jun 23, 2010 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird.Upgrade dev-libs/nss.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Oct 30, 2017 | Jun 24, 2010 |
| Mfsa2010 28 | — | Upgrade to Mozilla Firefox version 3.6.4Upgrade to Mozilla Firefox version 3.5.10 | Jun 14, 2012 | Jun 24, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.5 | Feb 3, 2012 | Jun 24, 2010 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade escUpgrade totemUpgrade devhelp-develUpgrade totem-develUpgrade yelpUpgrade xulrunnerUpgrade gnome-python2-libeggUpgrade devhelpUpgrade gnome-python2-gtkspellUpgrade totem-mozpluginUpgrade gnome-python2-gtkhtml2Upgrade gnome-python2-extrasUpgrade gnome-python2-gtkmozembed | Oct 16, 2024 | Jun 23, 2010 |
| Suse | — | Upgrade orbit2-x86Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner191-gnomevfsUpgrade MozillaFirefox-translations-otherUpgrade gconf2-32bitUpgrade libidlUpgrade libidl-x86Upgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-nss-x86Upgrade orbit2Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefoxUpgrade libfreebl3-x86Upgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefox-develUpgrade orbit2-32bitUpgrade mozilla-xulrunner192-x86Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner191-translationsUpgrade gconf2Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nspr-32bitUpgrade gconf2-x86Upgrade mozilla-nsprUpgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner192-develUpgrade libidl-32bitUpgrade mozilla-nspr-x86Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner190Upgrade mozilla-nssUpgrade libfreebl3 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade firefoxUpgrade firefox-3.0Upgrade firefox-3.5Upgrade xulrunner-1.9.2 | Nov 8, 2024 | Jun 24, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub