Use-after-free vulnerability in the imgRequest::OnStopFrame function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-develUpgrade xulrunnerUpgrade thunderbirdUpgrade firefox | Dec 1, 2016 | Jan 13, 2013 |
| Freebsd | — | Upgrade seamonkeyUpgrade linux-firefoxUpgrade firefoxUpgrade libxulUpgrade thunderbirdUpgrade ca_root_nssUpgrade linux-thunderbirdUpgrade linux-seamonkey | Dec 10, 2025 | Jan 9, 2013 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox-bin.Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Jan 13, 2013 |
| Mfsa2013 02 | — | Upgrade to Mozilla Firefox ESR version 10.0.12Upgrade to Mozilla Firefox version 18.0Upgrade to Mozilla Firefox ESR version 17.0.2Upgrade to Mozilla Firefox ESR version 10.0.11Upgrade to the latest version of Mozilla Firefox | Jan 14, 2013 | Jan 13, 2013 |
| Mozilla Seamonkey | — | Upgrade to the latest version of Mozilla SeaMonkeyUpgrade to Mozilla SeaMonkey version 2.15 | Jan 10, 2013 | Jan 8, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird ESR version 10.0.12Upgrade to Mozilla Thunderbird ESR version 17.0.2Upgrade to Mozilla Thunderbird version 17.0.2Upgrade to the latest version of Mozilla Thunderbird | Jan 10, 2013 | Jan 8, 2013 |
| Oracle_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade xulrunner-develUpgrade xulrunner | Oct 16, 2024 | Jan 13, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 8, 2013 |
| Suse | — | Upgrade mozilla-nspr-develUpgrade seamonkey-ircUpgrade xulrunner-debuginfo-32bitUpgrade xulrunner-debuginfoUpgrade mozilla-jsUpgrade libfreebl3-debuginfo-32bitUpgrade enigmailUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-nss-certs-debuginfo-32bitUpgrade MozillaFirefox-translations-commonUpgrade libsoftokn3-x86Upgrade mozilla-nspr-debuginfo-x86Upgrade xulrunner-devel-debuginfoUpgrade MozillaThunderbirdUpgrade mozilla-js-32bitUpgrade mozilla-nspr-64bitUpgrade xulrunner-debuginfo-x86Upgrade libsoftokn3-32bitUpgrade sle-sdk-releaseUpgrade libsoftokn3-debuginfo-32bitUpgrade MozillaThunderbird-translations-commonUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-nspr-debugsourceUpgrade mozilla-nss-debuginfo-32bitUpgrade firefox3-pangoUpgrade MozillaFirefox-debugsourceUpgrade firefox3-cairo-32bitUpgrade MozillaThunderbird-debugsourceUpgrade mozilla-nspr-debuginfoUpgrade mozillafirefox-branding-upstreamUpgrade xulrunner-buildsymbolsUpgrade xulrunner-debugsourceUpgrade mozilla-nss-sysinit-x86Upgrade mozilla-nss-sysinitUpgrade mozilla-nss-certs-debuginfo-x86Upgrade MozillaFirefox-debuginfoUpgrade mozilla-nss-sysinit-debuginfoUpgrade mozilla-nss-tools-debuginfoUpgrade MozillaFirefox-develUpgrade mozilla-js-x86Upgrade mozilla-nss-develUpgrade mozilla-nss-debuginfoUpgrade firefox3-gtk2Upgrade mozilla-nss-certs-32bitUpgrade libfreebl3Upgrade mozilla-nss-debugsourceUpgrade libfreebl3-x86Upgrade mozilla-nss-debuginfo-x86Upgrade seamonkey-translations-otherUpgrade libsoftokn3-debuginfoUpgrade mozilla-nss-sysinit-debuginfo-x86Upgrade MozillaThunderbird-debuginfoUpgrade mozilla-nss-64bitUpgrade mozilla-nss-toolsUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade mozilla-js-debuginfo-x86Upgrade firefox3-cairoUpgrade MozillaFirefoxUpgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nss-32bitUpgrade mozilla-nspr-debuginfo-32bitUpgrade libfreebl3-debuginfo-x86Upgrade mozilla-nss-x86Upgrade MozillaFirefox-translationsUpgrade firefox3-pango-32bitUpgrade MozillaThunderbird-develUpgrade seamonkey-dom-inspectorUpgrade libsoftokn3-debuginfo-x86Upgrade libfreebl3-debuginfoUpgrade xulrunner-x86Upgrade libfreebl3-32bitUpgrade enigmail-debuginfoUpgrade xulrunner-develUpgrade seamonkey-translations-commonUpgrade MozillaThunderbird-devel-debuginfoUpgrade MozillaFirefox-translations-otherUpgrade seamonkey-debuginfoUpgrade mozilla-nss-certs-x86Upgrade mozilla-js-debuginfo-32bitUpgrade MozillaThunderbird-buildsymbolsUpgrade mozilla-nspr-32bitUpgrade seamonkey-venkmanUpgrade xulrunnerUpgrade mozilla-js-debuginfoUpgrade seamonkeyUpgrade mozilla-nspr-x86Upgrade mozilla-nsprUpgrade mozilla-nssUpgrade libsoftokn3Upgrade seamonkey-debugsourceUpgrade MozillaFirefox-branding-SLEDUpgrade firefox3-gtk2-32bitUpgrade mozilla-nss-certsUpgrade mozilla-nss-certs-debuginfoUpgrade xulrunner-32bit | Feb 17, 2015 | Jan 13, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Jan 13, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub