Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving a state-change event during an update of the offline cache.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade xulrunnerUpgrade xulrunner-devel | Dec 1, 2016 | Oct 30, 2013 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade thunderbirdUpgrade firefoxUpgrade seamonkeyUpgrade linux-firefoxUpgrade linux-thunderbird | Dec 10, 2025 | Oct 30, 2013 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade dev-libs/nspr. | Oct 30, 2017 | Oct 30, 2013 |
| Mfsa2013 98 | — | Upgrade to Mozilla Firefox ESR version 24.1Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 25.0Upgrade to Mozilla Firefox ESR version 17.0.10 | Oct 30, 2013 | Oct 29, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.22Upgrade to the latest version of Mozilla SeaMonkey | Dec 8, 2014 | Oct 30, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 24.1Upgrade to Mozilla Thunderbird ESR version 17.0.10Upgrade to the latest version of Mozilla Thunderbird | Oct 30, 2013 | Oct 29, 2013 |
| Oracle_linux | — | Upgrade thunderbirdUpgrade xulrunnerUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Oct 30, 2013 |
| Suse | — | Upgrade firefox-pixmanUpgrade firefox-libstdc++6-32bitUpgrade mozilla-xulrunner191-32bitUpgrade seamonkey-dom-inspectorUpgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-develUpgrade mozilla-nssUpgrade firefox-fontconfigUpgrade firefox-pixman-32bitUpgrade firefox-gtk2-32bitUpgrade firefox-libgcc_s1-32bitUpgrade firefox-pango-32bitUpgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade mozilla-nspr-develUpgrade firefox-cairo-32bitUpgrade mozilla-jsUpgrade MozillaFirefox-translations-commonUpgrade seamonkeyUpgrade mozilla-nspr-32bitUpgrade mozilla-nsprUpgrade enigmailUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nss-toolsUpgrade firefox-pcre-32bitUpgrade mozilla-xulrunner191Upgrade MozillaThunderbird-buildsymbolsUpgrade firefox-gtk2Upgrade firefox-freetype2-32bitUpgrade firefox-pangoUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner192-32bitUpgrade firefox-glib2-32bitUpgrade firefox-libstdc++6Upgrade firefox-gtk2-langUpgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaThunderbird-translations-otherUpgrade seamonkey-ircUpgrade firefox-atkUpgrade firefox-atk-32bitUpgrade xulrunner-develUpgrade firefox-fontconfig-32bitUpgrade xulrunnerUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-nss-develUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner191-translations-32bitUpgrade xulrunner-32bitUpgrade firefox-freetype2Upgrade mozillafirefox-branding-upstreamUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner191-gnomevfsUpgrade seamonkey-venkmanUpgrade firefox-pcreUpgrade mozilla-xulrunner192-gnome-32bitUpgrade xulrunner-buildsymbolsUpgrade seamonkey-translations-commonUpgrade firefox-glib2Upgrade mozilla-js-32bitUpgrade seamonkey-translations-otherUpgrade mozilla-xulrunner192Upgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefoxUpgrade mozilla-nss-32bitUpgrade mozillafirefox-buildsymbolsUpgrade firefox-cairoUpgrade firefox-libgcc_s1Upgrade MozillaThunderbird-translations-common | Feb 17, 2015 | Oct 30, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Oct 30, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub