The navigator.plugins implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle destruction of the DOM plugin array, which might allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via crafted access to the navigator object, related to a "dangling pointer vulnerability."
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nss-toolsUpgrade seamonkey-nssUpgrade seamonkey-chatUpgrade thunderbirdUpgrade firefoxUpgrade nspr-develUpgrade seamonkey-nspr-develUpgrade seamonkey-nsprUpgrade nssUpgrade nsprUpgrade xulrunnerUpgrade seamonkey-mailUpgrade seamonkey-js-debuggerUpgrade nss-pkcs11-develUpgrade seamonkey-develUpgrade seamonkey-nss-develUpgrade nss-develUpgrade xulrunner-develUpgrade seamonkeyUpgrade seamonkey-dom-inspector | Dec 1, 2016 | Sep 9, 2010 |
| Freebsd | — | Upgrade thunderbirdUpgrade seamonkeyUpgrade firefoxUpgrade linux-firefox-develUpgrade libxulUpgrade linux-firefox | Dec 10, 2025 | Sep 8, 2010 |
| Gentoo Linux | — | Upgrade dev-libs/nss.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin. | Oct 30, 2017 | Sep 9, 2010 |
| Mfsa2010 51 | — | Upgrade to Mozilla Firefox version 3.5.12Upgrade to Mozilla Firefox version 3.6.9 | Jun 14, 2012 | Sep 9, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.7 | Feb 3, 2012 | Sep 9, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.3Upgrade to Mozilla Thunderbird version 3.0.7 | Feb 22, 2012 | Sep 9, 2010 |
| Oracle_linux | — | Upgrade nssUpgrade xulrunnerUpgrade nss-pkcs11-develUpgrade nsprUpgrade nss-develUpgrade nss-toolsUpgrade firefoxUpgrade xulrunner-develUpgrade nspr-devel | Oct 16, 2024 | Sep 9, 2010 |
| Suse | — | Upgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner190-gnomevfsUpgrade orbit2Upgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-nss-x86Upgrade MozillaFirefox-branding-SLEDUpgrade libidl-x86Upgrade libfreebl3-32bitUpgrade gconf2-32bitUpgrade MozillaThunderbird-develUpgrade orbit2-32bitUpgrade mozilla-nssUpgrade mozilla-nsprUpgrade mozilla-nss-32bitUpgrade libidl-32bitUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner191-x86Upgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner192Upgrade orbit2-x86Upgrade mozilla-xulrunner191-translationsUpgrade libfreebl3-x86Upgrade libfreebl3Upgrade mozilla-xulrunner192-gnomeUpgrade gconf2-x86Upgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner191Upgrade mozilla-nspr-x86Upgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefoxUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner192-32bitUpgrade libidlUpgrade mozilla-nss-toolsUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner190-x86Upgrade MozillaThunderbird-translations-otherUpgrade mozilla-xulrunner191-gnomevfsUpgrade gconf2Upgrade mozilla-xulrunner191-32bitUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-translationsUpgrade MozillaThunderbirdUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translations | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade xulrunner-1.9.1Upgrade abrowserUpgrade thunderbirdUpgrade firefox-3.0Upgrade xulrunner-1.9.2Upgrade firefox-3.5 | Nov 8, 2024 | Sep 9, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub