Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade seamonkey-nspr-develUpgrade seamonkey-nss-develUpgrade seamonkey-js-debuggerUpgrade seamonkey-develUpgrade seamonkeyUpgrade seamonkey-nssUpgrade seamonkey-nsprUpgrade seamonkey-dom-inspectorUpgrade firefoxUpgrade seamonkey-chatUpgrade thunderbirdUpgrade seamonkey-mail | Dec 1, 2016 | Oct 27, 2010 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade linux-firefoxUpgrade seamonkeyUpgrade linux-firefox-develUpgrade firefoxUpgrade thunderbirdUpgrade libxul | Dec 10, 2025 | Oct 28, 2010 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox.Upgrade net-libs/xulrunner.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Oct 27, 2010 |
| Mfsa2010 73 | — | Upgrade to Mozilla Firefox version 3.5.15Upgrade to Mozilla Firefox version 3.6.12 | Jun 14, 2012 | Oct 27, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.10 | Feb 3, 2012 | Oct 27, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.6Upgrade to Mozilla Thunderbird version 3.0.10 | Feb 22, 2012 | Oct 27, 2010 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-devel | Oct 16, 2024 | Oct 27, 2010 |
| Suse | — | Upgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner191Upgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner191-translationsUpgrade orbit2Upgrade MozillaFirefox-branding-SLEDUpgrade MozillaThunderbirdUpgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbird-translations-otherUpgrade libidl-x86Upgrade libfreebl3Upgrade gconf2Upgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-nssUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-x86Upgrade orbit2-x86Upgrade gconf2-32bitUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner190-x86Upgrade libfreebl3-x86Upgrade mozilla-xulrunner192-translations-32bitUpgrade orbit2-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-develUpgrade gconf2-x86Upgrade mozilla-xulrunner192-32bitUpgrade libidlUpgrade mozilla-nspr-x86Upgrade mozilla-xulrunner192Upgrade mozilla-nsprUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner190Upgrade MozillaFirefoxUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner191-x86Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner190-translationsUpgrade libidl-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-nss-x86Upgrade libfreebl3-32bitUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192-gnome | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade xulrunner-1.9.1Upgrade xulrunner-1.9.2Upgrade firefox-3.5Upgrade firefox-3.0Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Oct 28, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub