The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle node removal in XUL trees, which allows remote attackers to execute arbitrary code via vectors involving access to deleted memory, related to a "dangling pointer vulnerability."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-js-debuggerUpgrade seamonkeyUpgrade thunderbirdUpgrade nss-pkcs11-develUpgrade seamonkey-develUpgrade seamonkey-nssUpgrade seamonkey-mailUpgrade seamonkey-dom-inspectorUpgrade xulrunner-develUpgrade nspr-develUpgrade seamonkey-nss-develUpgrade firefoxUpgrade nss-develUpgrade xulrunnerUpgrade seamonkey-nsprUpgrade nssUpgrade seamonkey-nspr-develUpgrade seamonkey-chatUpgrade nss-toolsUpgrade nspr | Dec 1, 2016 | Sep 9, 2010 |
| Freebsd | — | Upgrade libxulUpgrade linux-firefox-develUpgrade thunderbirdUpgrade firefoxUpgrade seamonkeyUpgrade linux-firefox | Dec 10, 2025 | Sep 8, 2010 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Sep 9, 2010 |
| Mfsa2010 56 | — | Upgrade to Mozilla Firefox version 3.5.12Upgrade to Mozilla Firefox version 3.6.9 | Jun 14, 2012 | Sep 9, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.7 | Feb 3, 2012 | Sep 9, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.7Upgrade to Mozilla Thunderbird version 3.1.3 | Feb 22, 2012 | Sep 9, 2010 |
| Oracle_linux | — | Upgrade nss-toolsUpgrade firefoxUpgrade nss-pkcs11-develUpgrade nss-develUpgrade nssUpgrade nspr-develUpgrade nsprUpgrade xulrunnerUpgrade xulrunner-devel | Oct 16, 2024 | Sep 9, 2010 |
| Suse | — | Upgrade MozillaFirefox-translationsUpgrade gconf2-x86Upgrade mozilla-xulrunner190-translationsUpgrade libidlUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-develUpgrade MozillaFirefoxUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner190-gnomevfsUpgrade libfreebl3-32bitUpgrade mozilla-nss-32bitUpgrade mozilla-nsprUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-nspr-x86Upgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-x86Upgrade mozilla-nss-x86Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner190-32bitUpgrade libidl-32bitUpgrade mozilla-nss-toolsUpgrade orbit2-32bitUpgrade MozillaThunderbirdUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-translations-commonUpgrade gconf2Upgrade orbit2Upgrade MozillaThunderbird-translations-commonUpgrade mozilla-nssUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192-translations-32bitUpgrade gconf2-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade MozillaThunderbird-develUpgrade MozillaFirefox-develUpgrade orbit2-x86Upgrade libidl-x86Upgrade libfreebl3-x86Upgrade libfreebl3 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbirdUpgrade abrowserUpgrade firefox-3.5Upgrade xulrunner-1.9.2Upgrade xulrunner-1.9.1Upgrade firefox-3.0 | Nov 8, 2024 | Sep 9, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub