Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade seamonkey-nspr-develUpgrade seamonkey-dom-inspectorUpgrade seamonkey-chatUpgrade seamonkey-nsprUpgrade seamonkey-mailUpgrade xulrunner-devel-unstableUpgrade seamonkey-nss-develUpgrade xulrunner-develUpgrade seamonkeyUpgrade seamonkey-nssUpgrade seamonkey-develUpgrade seamonkey-js-debugger | Dec 1, 2016 | Mar 23, 2009 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner-bin.Upgrade www-client/icecat.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird-bin. | Oct 30, 2017 | Mar 23, 2009 |
| Mfsa2009 13 | — | Upgrade to Mozilla Firefox version 3.0.8 | Jun 14, 2012 | Mar 23, 2009 |
| Oracle_linux | — | Upgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade xulrunner | Oct 16, 2024 | Mar 23, 2009 |
| Suse | — | Upgrade orbit2-x86Upgrade mozilla-nssUpgrade libidl-32bitUpgrade libfreebl3-x86Upgrade MozillaFirefox-develUpgrade gconf2-x86Upgrade libidl-x86Upgrade libfreebl3Upgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-x86Upgrade mozilla-nspr-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-nsprUpgrade mozilla-xulrunner190Upgrade libfreebl3-32bitUpgrade gconf2-32bitUpgrade orbit2-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nss-x86Upgrade orbit2Upgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner191-32bitUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-toolsUpgrade MozillaFirefoxUpgrade mozilla-xulrunner191-translationsUpgrade gconf2Upgrade mozilla-xulrunner191Upgrade libidl | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade abrowserUpgrade xulrunner-1.9Upgrade firefox | Nov 8, 2024 | Mar 23, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub