Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-nss-develUpgrade seamonkey-develUpgrade seamonkey-nsprUpgrade seamonkey-nssUpgrade seamonkeyUpgrade seamonkey-dom-inspectorUpgrade firefoxUpgrade seamonkey-chatUpgrade seamonkey-js-debuggerUpgrade seamonkey-nspr-develUpgrade seamonkey-mailUpgrade thunderbird | Dec 1, 2016 | Apr 5, 2010 |
| Freebsd | — | Upgrade nssUpgrade linux-f10-nssUpgrade linux-firefox-develUpgrade linux-firefoxUpgrade seamonkeyUpgrade firefoxUpgrade thunderbird | Dec 10, 2025 | Mar 30, 2010 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey.Upgrade www-client/icecat.Upgrade mail-client/thunderbird.Upgrade dev-libs/nss. | Oct 30, 2017 | Apr 5, 2010 |
| Mfsa2010 19 | — | Upgrade to Mozilla Firefox version 3.0.19Upgrade to Mozilla Firefox version 3.6.2Upgrade to Mozilla Firefox version 3.5.9 | Jun 14, 2012 | Apr 5, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.4 | Feb 3, 2012 | Apr 5, 2010 |
| Oracle_linux | — | Upgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade firefoxUpgrade xulrunner | Oct 16, 2024 | Apr 5, 2010 |
| Suse | — | Upgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner191Upgrade mozilla-xulrunner192-develUpgrade MozillaFirefox-translationsUpgrade mozilla-nspr-x86Upgrade mozilla-nss-toolsUpgrade orbit2-32bitUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-nss-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner192-x86Upgrade gconf2-x86Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade libidl-32bitUpgrade MozillaFirefoxUpgrade libfreebl3Upgrade libfreebl3-x86Upgrade libfreebl3-32bitUpgrade libidlUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner192-gnome-32bitUpgrade orbit2-x86Upgrade gconf2Upgrade mozilla-nsprUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192Upgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-develUpgrade libidl-x86Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nssUpgrade gconf2-32bitUpgrade orbit2Upgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner190Upgrade mozilla-xulrunner191-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade firefox-3.0Upgrade firefox-3.5Upgrade xulrunner-1.9.1Upgrade abrowser | Nov 8, 2024 | Apr 5, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub