Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the NodeIterator interface and a javascript callback.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade xulrunner | Dec 1, 2016 | Jul 30, 2010 |
| Freebsd | — | Upgrade linux-firefox-develUpgrade seamonkeyUpgrade linux-firefoxUpgrade thunderbirdUpgrade firefox | Dec 10, 2025 | Jul 21, 2010 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner-bin.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/icecat.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Jul 30, 2010 |
| Mfsa2010 36 | — | Upgrade to Mozilla Firefox version 3.6.7Upgrade to Mozilla Firefox version 3.5.11 | Jun 14, 2012 | Jul 30, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.6 | Feb 3, 2012 | Jul 30, 2010 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunnerUpgrade xulrunner-devel | Oct 16, 2024 | Jul 30, 2010 |
| Suse | — | Upgrade orbit2-32bitUpgrade MozillaFirefox-translations-commonUpgrade libfreebl3Upgrade MozillaFirefox-develUpgrade mozilla-nss-toolsUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner190-translationsUpgrade libidlUpgrade mozilla-nss-x86Upgrade gconf2Upgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nspr-32bitUpgrade orbit2Upgrade mozilla-nss-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner191Upgrade MozillaFirefoxUpgrade mozilla-xulrunner191-x86Upgrade libidl-x86Upgrade mozilla-nssUpgrade gconf2-32bitUpgrade mozilla-nsprUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner190-32bitUpgrade libidl-32bitUpgrade mozilla-xulrunner192-translations-32bitUpgrade libfreebl3-x86Upgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner190Upgrade MozillaFirefox-translationsUpgrade MozillaFirefox-branding-SLEDUpgrade orbit2-x86Upgrade gconf2-x86Upgrade mozilla-nspr-x86Upgrade libfreebl3-32bit | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade firefox-3.5Upgrade abrowserUpgrade xulrunner-1.9.2Upgrade firefox | Nov 8, 2024 | Jul 30, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub