Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkeyUpgrade seamonkey-nss-develUpgrade firefoxUpgrade seamonkey-js-debuggerUpgrade seamonkey-develUpgrade thunderbirdUpgrade seamonkey-nspr-develUpgrade seamonkey-chatUpgrade seamonkey-nssUpgrade seamonkey-nsprUpgrade seamonkey-mailUpgrade seamonkey-dom-inspector | Dec 1, 2016 | Apr 5, 2010 |
| Freebsd | — | Upgrade seamonkeyUpgrade linux-f10-nssUpgrade linux-firefoxUpgrade firefoxUpgrade linux-firefox-develUpgrade thunderbirdUpgrade nss | Dec 10, 2025 | Mar 30, 2010 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/icecat.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin. | Oct 30, 2017 | Apr 5, 2010 |
| Mfsa2010 18 | — | Upgrade to Mozilla Firefox version 3.0.19Upgrade to Mozilla Firefox version 3.5.9Upgrade to Mozilla Firefox version 3.6.2 | Jun 14, 2012 | Apr 5, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.4 | Feb 3, 2012 | Apr 5, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.4 | Feb 22, 2012 | Apr 5, 2010 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade xulrunner-devel-unstableUpgrade firefox | Oct 16, 2024 | Apr 5, 2010 |
| Suse | — | Upgrade orbit2Upgrade orbit2-x86Upgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192-translations-32bitUpgrade gconf2-32bitUpgrade gconf2Upgrade libidl-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner192-x86Upgrade MozillaThunderbird-translations-otherUpgrade mozilla-nssUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-develUpgrade mozilla-nss-toolsUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner191-gnomevfsUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-translations-commonUpgrade libfreebl3-x86Upgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner191Upgrade MozillaThunderbirdUpgrade gconf2-x86Upgrade mozilla-nspr-x86Upgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-develUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade orbit2-32bitUpgrade libidl-32bitUpgrade mozilla-nsprUpgrade mozilla-nss-x86Upgrade libfreebl3-32bitUpgrade MozillaFirefoxUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner191-x86Upgrade libidlUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner191-translationsUpgrade libfreebl3Upgrade mozilla-xulrunner190Upgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner190-gnomevfs | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefox-3.5Upgrade xulrunner-1.9.1Upgrade firefox-3.0Upgrade abrowserUpgrade xulrunner-1.9 | Nov 8, 2024 | Apr 5, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub