The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkeyUpgrade seamonkey-dom-inspectorUpgrade seamonkey-js-debuggerUpgrade seamonkey-develUpgrade seamonkey-mailUpgrade firefoxUpgrade seamonkey-chatUpgrade nspr-develUpgrade thunderbirdUpgrade nspr | Dec 1, 2016 | Sep 10, 2009 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade firefox | Dec 10, 2025 | Sep 10, 2009 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/icecat.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Sep 10, 2009 |
| Mfsa2009 49 | — | Upgrade to Mozilla Firefox version 3.0.14Upgrade to Mozilla Firefox version 3.5.3 | Jun 14, 2012 | Sep 10, 2009 |
| Oracle_linux | — | Upgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade xulrunnerUpgrade nspr-develUpgrade firefoxUpgrade nspr | Oct 16, 2024 | Sep 10, 2009 |
| Suse | — | Upgrade mozilla-nss-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190Upgrade mozilla-nspr-x86Upgrade mozilla-nss-x86Upgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade libidlUpgrade gconf2-x86Upgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner190-32bitUpgrade libfreebl3-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-nsprUpgrade mozilla-xulrunner191-x86Upgrade MozillaFirefoxUpgrade libidl-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefox-translations-commonUpgrade libfreebl3Upgrade mozilla-xulrunner192Upgrade MozillaFirefox-develUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner191-translationsUpgrade libidl-x86Upgrade mozilla-xulrunner191-32bitUpgrade orbit2-x86Upgrade gconf2Upgrade mozilla-xulrunner190-x86Upgrade orbit2-32bitUpgrade orbit2Upgrade mozilla-nssUpgrade libfreebl3-x86Upgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade MozillaFirefox-translations-otherUpgrade gconf2-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade xulrunner-1.9Upgrade abrowserUpgrade thunderbird | Nov 8, 2024 | Sep 10, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub