Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a crafted HTML document, related to an improper frame construction process for menus.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade thunderbirdUpgrade linux-firefox-develUpgrade firefoxUpgrade seamonkey | Dec 10, 2025 | Jun 23, 2010 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/icecat.Upgrade dev-libs/nss.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Jun 24, 2010 |
| Mfsa2010 27 | — | Upgrade to Mozilla Firefox version 3.5.10 | Jun 14, 2012 | Jun 24, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.5 | Feb 3, 2012 | Jun 24, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 22, 2010 |
| Suse | — | Upgrade mozilla-nssUpgrade mozilla-xulrunner192-gnomeUpgrade libidl-x86Upgrade mozilla-xulrunner192-x86Upgrade MozillaFirefox-branding-SLEDUpgrade libfreebl3-x86Upgrade mozilla-xulrunner191-x86Upgrade mozilla-nspr-x86Upgrade gconf2-32bitUpgrade mozilla-nspr-32bitUpgrade orbit2-x86Upgrade gconf2-x86Upgrade MozillaFirefox-translationsUpgrade mozilla-nsprUpgrade libidl-32bitUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner190-x86Upgrade libfreebl3Upgrade MozillaFirefoxUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner190-32bitUpgrade orbit2-32bitUpgrade libfreebl3-32bitUpgrade mozilla-xulrunner190-translationsUpgrade orbit2Upgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-nss-x86Upgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nss-32bitUpgrade libidlUpgrade mozilla-nss-toolsUpgrade mozilla-xulrunner190Upgrade gconf2Upgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner191 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade seamonkey | Nov 19, 2024 | Jun 24, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub