Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a crafted HTML document, related to an improper frame construction process for menus.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-firefox-develUpgrade firefoxUpgrade thunderbirdUpgrade seamonkey | Dec 10, 2025 | Jun 23, 2010 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade dev-libs/nss.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade www-client/icecat.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Jun 24, 2010 |
| Mfsa2010 27 | — | Upgrade to Mozilla Firefox version 3.5.10 | Jun 14, 2012 | Jun 24, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.5 | Feb 3, 2012 | Jun 24, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 22, 2010 |
| Suse | — | Upgrade MozillaFirefox-develUpgrade libfreebl3Upgrade mozilla-xulrunner192Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nspr-x86Upgrade mozilla-xulrunner192-gnomeUpgrade libfreebl3-x86Upgrade libidl-32bitUpgrade mozilla-xulrunner192-x86Upgrade orbit2-x86Upgrade mozilla-nsprUpgrade mozilla-nspr-32bitUpgrade mozilla-nssUpgrade gconf2-32bitUpgrade gconf2-x86Upgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner190-x86Upgrade MozillaFirefox-translationsUpgrade libidl-x86Upgrade orbit2Upgrade orbit2-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner190Upgrade MozillaFirefoxUpgrade mozilla-nss-toolsUpgrade mozilla-nss-32bitUpgrade libidlUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-nss-x86Upgrade gconf2Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner192-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade seamonkey | Nov 19, 2024 | Jun 24, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub