Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by creating JavaScript web-workers recursively.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-firefoxUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade firefox | Dec 10, 2025 | Oct 28, 2009 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner. | Oct 30, 2017 | Oct 29, 2009 |
| Mfsa2009 54 | — | Upgrade to Mozilla Firefox version 3.5.4 | Jun 14, 2012 | Oct 29, 2009 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner191-32bitUpgrade libidlUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nspr-x86Upgrade MozillaFirefoxUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191Upgrade gconf2Upgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner190Upgrade MozillaFirefox-develUpgrade MozillaFirefox-translationsUpgrade libfreebl3Upgrade mozilla-xulrunner191-x86Upgrade mozilla-nssUpgrade mozilla-nss-x86Upgrade orbit2-x86Upgrade libidl-32bitUpgrade orbit2-32bitUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner192Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner191-translationsUpgrade libidl-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade gconf2-x86Upgrade libfreebl3-x86Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade libfreebl3-32bitUpgrade mozilla-nsprUpgrade orbit2Upgrade mozilla-xulrunner190-translationsUpgrade gconf2-32bit | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade firefox-3.5Upgrade abrowserUpgrade xulrunner-1.9.1Upgrade xulrunner-1.9 | Nov 8, 2024 | Oct 29, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub