Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nspr-develUpgrade seamonkey-chatUpgrade nsprUpgrade firefoxUpgrade seamonkey-mailUpgrade thunderbirdUpgrade seamonkey-js-debuggerUpgrade seamonkey-develUpgrade seamonkeyUpgrade seamonkey-dom-inspector | Dec 1, 2016 | Sep 10, 2009 |
| Freebsd | — | Upgrade firefoxUpgrade seamonkeyUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade linux-seamonkey | Dec 10, 2025 | Sep 10, 2009 |
| Gentoo Linux | — | Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Sep 10, 2009 |
| Mfsa2009 49 | — | Upgrade to Mozilla Firefox version 3.0.14Upgrade to Mozilla Firefox version 3.5.3 | Jun 14, 2012 | Sep 10, 2009 |
| Oracle_linux | — | Upgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade nspr-develUpgrade firefoxUpgrade nsprUpgrade xulrunner | Oct 16, 2024 | Sep 10, 2009 |
| Suse | — | Upgrade mozilla-xulrunner191Upgrade libidlUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-nss-x86Upgrade mozilla-nss-32bitUpgrade libfreebl3-32bitUpgrade gconf2-x86Upgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner191-x86Upgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-nspr-x86Upgrade libidl-32bitUpgrade mozilla-nsprUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-toolsUpgrade MozillaFirefoxUpgrade mozilla-xulrunner191-gnomevfsUpgrade MozillaFirefox-branding-SLEDUpgrade libidl-x86Upgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192-x86Upgrade orbit2Upgrade mozilla-xulrunner192Upgrade libfreebl3Upgrade libfreebl3-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner191-translationsUpgrade MozillaFirefox-translations-otherUpgrade gconf2Upgrade mozilla-xulrunner190-x86Upgrade orbit2-32bitUpgrade orbit2-x86Upgrade gconf2-32bitUpgrade mozilla-nss | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade firefox-3.0Upgrade abrowserUpgrade thunderbird | Nov 8, 2024 | Sep 10, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub