Double free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to execute arbitrary code via "cloned XUL DOM elements which were linked as a parent and child," which are not properly handled during garbage collection.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-mailUpgrade seamonkey-develUpgrade seamonkey-nss-develUpgrade thunderbirdUpgrade seamonkeyUpgrade seamonkey-nspr-develUpgrade seamonkey-nsprUpgrade firefox-debuginfoUpgrade seamonkey-nssUpgrade seamonkey-js-debuggerUpgrade seamonkey-dom-inspectorUpgrade firefoxUpgrade seamonkey-chat | Dec 1, 2016 | Mar 4, 2009 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade dev-libs/nss.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/icecat.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox. | Oct 30, 2017 | Mar 4, 2009 |
| Mfsa2009 08 | — | Upgrade to Mozilla Firefox version 3.0.7 | Jun 14, 2012 | Mar 4, 2009 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunner-develUpgrade xulrunner-devel-unstableUpgrade xulrunner | Oct 16, 2024 | Mar 5, 2009 |
| Suse | — | Upgrade gconf2-32bitUpgrade libfreebl3-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade gconf2Upgrade libfreebl3-x86Upgrade mozilla-xulrunner192-x86Upgrade mozilla-nssUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner190-x86Upgrade MozillaFirefox-translationsUpgrade orbit2-32bitUpgrade mozilla-nss-32bitUpgrade libidlUpgrade libidl-x86Upgrade mozilla-nss-x86Upgrade mozilla-xulrunner192Upgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nspr-x86Upgrade gconf2-x86Upgrade orbit2-x86Upgrade orbit2Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade libfreebl3Upgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-nsprUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner191-x86Upgrade MozillaFirefoxUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner191Upgrade libidl-32bitUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner190 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade abrowserUpgrade firefox-3.0 | Nov 8, 2024 | Mar 5, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub