Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-nssUpgrade seamonkey-develUpgrade seamonkeyUpgrade xulrunnerUpgrade seamonkey-nspr-develUpgrade seamonkey-js-debuggerUpgrade xulrunner-develUpgrade seamonkey-nss-develUpgrade firefoxUpgrade seamonkey-nsprUpgrade seamonkey-chatUpgrade seamonkey-dom-inspectorUpgrade seamonkey-mailUpgrade thunderbird | Dec 1, 2016 | Oct 27, 2010 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade linux-firefoxUpgrade firefoxUpgrade seamonkeyUpgrade linux-firefox-develUpgrade libxul | Dec 10, 2025 | Oct 28, 2010 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade dev-libs/nss.Upgrade www-client/seamonkey.Upgrade www-client/icecat.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox.Upgrade net-libs/xulrunner.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Oct 27, 2010 |
| Mfsa2010 73 | — | Upgrade to Mozilla Firefox version 3.5.15Upgrade to Mozilla Firefox version 3.6.12 | Jun 14, 2012 | Oct 27, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.10 | Feb 3, 2012 | Oct 27, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.10Upgrade to Mozilla Thunderbird version 3.1.6 | Feb 22, 2012 | Oct 27, 2010 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade xulrunner | Oct 16, 2024 | Oct 27, 2010 |
| Suse | — | Upgrade mozilla-xulrunner191-translationsUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner192-translations-commonUpgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade MozillaThunderbird-develUpgrade mozillafirefox-branding-sledUpgrade mozilla-nssUpgrade libfreebl3Upgrade mozilla-xulrunner191Upgrade mozillathunderbird-translations-commonUpgrade libfreebl3-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade mozillafirefoxUpgrade gconf2Upgrade gconf2-32bitUpgrade python-xpcom191Upgrade mozilla-xulrunner191-translations-otherUpgrade mozilla-js192Upgrade mozilla-xulrunner191-translations-commonUpgrade mozilla-xulrunner191-32bitUpgrade libidl-x86Upgrade mozilla-js192-32bitUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner192-x86Upgrade orbit2Upgrade orbit2-x86Upgrade mozilla-xulrunner190-translationsUpgrade seamonkey-dom-inspectorUpgrade mozilla-xulrunner192Upgrade mozillafirefox-translations-commonUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-translations-other-32bitUpgrade mozilla-xulrunner191-develUpgrade mozilla-xulrunner192-gnome-32bitUpgrade seamonkey-translations-otherUpgrade libidl-32bitUpgrade mozillathunderbirdUpgrade MozillaFirefox-translationsUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-nss-x86Upgrade mozilla-nspr-32bitUpgrade seamonkey-ircUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner192-translations-common-32bitUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192-buildsymbolsUpgrade mozilla-xulrunner192-translations-otherUpgrade libfreebl3-32bitUpgrade enigmailUpgrade libidlUpgrade mozilla-nspr-x86Upgrade mozillathunderbird-translations-otherUpgrade orbit2-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner191-x86Upgrade seamonkeyUpgrade mozilla-nss-toolsUpgrade mozilla-nsprUpgrade mozillafirefox-translations-otherUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner190-32bitUpgrade seamonkey-translations-commonUpgrade gconf2-x86 | Feb 17, 2015 | Oct 27, 2010 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade xulrunner-1.9.1Upgrade abrowserUpgrade firefox-3.5Upgrade firefoxUpgrade firefox-3.0Upgrade thunderbird | Nov 8, 2024 | Oct 28, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub