Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code by accessing the locationbar property of a closed window.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade nss-pkcs11-develUpgrade seamonkey-nspr-develUpgrade thunderbirdUpgrade firefoxUpgrade nss-toolsUpgrade seamonkey-mailUpgrade seamonkey-chatUpgrade seamonkeyUpgrade seamonkey-dom-inspectorUpgrade nssUpgrade nss-develUpgrade seamonkey-js-debuggerUpgrade xulrunner-develUpgrade seamonkey-nssUpgrade seamonkey-develUpgrade seamonkey-nss-develUpgrade seamonkey-nspr | Dec 1, 2016 | Oct 21, 2010 |
| Freebsd | — | Upgrade linux-firefoxUpgrade seamonkeyUpgrade libxulUpgrade thunderbirdUpgrade linux-firefox-develUpgrade firefox | Dec 10, 2025 | Oct 20, 2010 |
| Gentoo Linux | — | Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox.Upgrade net-libs/xulrunner.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey. | Oct 30, 2017 | Oct 21, 2010 |
| Mfsa2010 66 | — | Upgrade to Mozilla Firefox version 3.5.14Upgrade to Mozilla Firefox version 3.6.11 | Jun 14, 2012 | Oct 21, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.9 | Feb 3, 2012 | Oct 21, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.5Upgrade to Mozilla Thunderbird version 3.0.9 | Feb 22, 2012 | Oct 21, 2010 |
| Oracle_linux | — | Upgrade nss-develUpgrade nssUpgrade firefoxUpgrade xulrunnerUpgrade nss-toolsUpgrade nss-pkcs11-develUpgrade xulrunner-devel | Oct 16, 2024 | Oct 21, 2010 |
| Suse | — | Upgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translationsUpgrade libfreebl3-x86Upgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner192-x86Upgrade orbit2Upgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-develUpgrade libfreebl3-32bitUpgrade orbit2-32bitUpgrade mozilla-xulrunner191-32bitUpgrade gconf2Upgrade MozillaFirefoxUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner191Upgrade MozillaThunderbird-develUpgrade libidlUpgrade mozilla-nspr-x86Upgrade mozilla-nsprUpgrade MozillaFirefox-translations-otherUpgrade gconf2-x86Upgrade orbit2-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nss-x86Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner191-translationsUpgrade libfreebl3Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191-x86Upgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192Upgrade MozillaThunderbirdUpgrade mozilla-xulrunner190-x86Upgrade libidl-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner191-gnomevfsUpgrade libidl-x86Upgrade mozilla-nssUpgrade MozillaThunderbird-translations-commonUpgrade gconf2-32bitUpgrade MozillaFirefox-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade firefoxUpgrade firefox-3.0Upgrade thunderbirdUpgrade xulrunner-1.9.1Upgrade xulrunner-1.9.2Upgrade firefox-3.5 | Nov 8, 2024 | Oct 21, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub