Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-nsprUpgrade seamonkey-mailUpgrade seamonkey-develUpgrade seamonkey-nspr-develUpgrade seamonkey-dom-inspectorUpgrade seamonkeyUpgrade seamonkey-chatUpgrade firefoxUpgrade seamonkey-nssUpgrade seamonkey-js-debuggerUpgrade seamonkey-nss-develUpgrade thunderbird | Dec 1, 2016 | Apr 5, 2010 |
| Freebsd | — | Upgrade linux-firefoxUpgrade firefoxUpgrade seamonkeyUpgrade thunderbirdUpgrade linux-firefox-develUpgrade linux-f10-nssUpgrade nss | Dec 10, 2025 | Mar 30, 2010 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade www-client/icecat.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Apr 5, 2010 |
| Mfsa2010 19 | — | Upgrade to Mozilla Firefox version 3.5.9Upgrade to Mozilla Firefox version 3.6.2Upgrade to Mozilla Firefox version 3.0.19 | Jun 14, 2012 | Apr 5, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.4 | Feb 3, 2012 | Apr 5, 2010 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade xulrunner-devel-unstableUpgrade firefoxUpgrade xulrunner | Oct 16, 2024 | Apr 5, 2010 |
| Suse | — | Upgrade mozilla-xulrunner192-32bitUpgrade orbit2Upgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner191-x86Upgrade MozillaFirefox-develUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nsprUpgrade libidl-x86Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nspr-32bitUpgrade gconf2Upgrade mozilla-xulrunner192-translationsUpgrade gconf2-32bitUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-nssUpgrade mozilla-xulrunner190-x86Upgrade MozillaFirefox-translationsUpgrade mozilla-nss-toolsUpgrade orbit2-x86Upgrade libidlUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner192-x86Upgrade libfreebl3Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefoxUpgrade libidl-32bitUpgrade libfreebl3-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade libfreebl3-x86Upgrade mozilla-nspr-x86Upgrade mozilla-nss-x86Upgrade mozilla-xulrunner192-develUpgrade gconf2-x86Upgrade mozilla-xulrunner190-translationsUpgrade orbit2-32bitUpgrade mozilla-xulrunner191 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade xulrunner-1.9.1Upgrade xulrunner-1.9Upgrade firefox-3.0Upgrade firefox-3.5 | Nov 8, 2024 | Apr 5, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub