Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-nspr-develUpgrade escUpgrade seamonkey-js-debuggerUpgrade yelpUpgrade xulrunnerUpgrade devhelp-develUpgrade gnome-python2-gtkmozembedUpgrade seamonkey-nss-develUpgrade seamonkey-develUpgrade seamonkey-nsprUpgrade seamonkey-mailUpgrade devhelpUpgrade gnome-python2-extrasUpgrade totem-develUpgrade xulrunner-develUpgrade seamonkey-chatUpgrade gnome-python2-gtkhtml2Upgrade totem-mozpluginUpgrade firefoxUpgrade gnome-python2-libeggUpgrade seamonkeyUpgrade seamonkey-dom-inspectorUpgrade thunderbirdUpgrade totemUpgrade seamonkey-nssUpgrade gnome-python2-gtkspell | Dec 1, 2016 | Jun 24, 2010 |
| Freebsd | — | Upgrade thunderbirdUpgrade firefoxUpgrade linux-firefox-develUpgrade seamonkey | Dec 10, 2025 | Jun 23, 2010 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner-bin.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss. | Oct 30, 2017 | Jun 24, 2010 |
| Mfsa2010 28 | — | Upgrade to Mozilla Firefox version 3.5.10Upgrade to Mozilla Firefox version 3.6.4 | Jun 14, 2012 | Jun 24, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.5 | Feb 3, 2012 | Jun 24, 2010 |
| Oracle_linux | — | Upgrade totem-develUpgrade devhelp-develUpgrade escUpgrade firefoxUpgrade xulrunner-develUpgrade totemUpgrade gnome-python2-gtkspellUpgrade gnome-python2-extrasUpgrade gnome-python2-libeggUpgrade devhelpUpgrade yelpUpgrade gnome-python2-gtkmozembedUpgrade xulrunnerUpgrade totem-mozpluginUpgrade gnome-python2-gtkhtml2 | Oct 16, 2024 | Jun 23, 2010 |
| Suse | — | Upgrade gconf2-x86Upgrade mozilla-nspr-x86Upgrade mozilla-xulrunner190-x86Upgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner191-x86Upgrade libidl-32bitUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner192-32bitUpgrade mozilla-nsprUpgrade libfreebl3Upgrade libfreebl3-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192Upgrade mozilla-nssUpgrade mozilla-xulrunner190-gnomevfsUpgrade MozillaFirefoxUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner191Upgrade orbit2-32bitUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade orbit2-x86Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner191-32bitUpgrade MozillaFirefox-translations-otherUpgrade orbit2Upgrade mozilla-xulrunner192-gnome-32bitUpgrade libidlUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner191-translationsUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-32bitUpgrade MozillaFirefox-develUpgrade mozilla-nss-x86Upgrade libfreebl3-x86Upgrade libidl-x86Upgrade mozilla-nss-toolsUpgrade gconf2-32bitUpgrade gconf2Upgrade mozilla-xulrunner192-x86 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade abrowserUpgrade firefox-3.5Upgrade firefox-3.0Upgrade xulrunner-1.9.2 | Nov 8, 2024 | Jun 24, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub