The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Use-after-free vulnerability in the nsTreeSelection function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via vectors involving a XUL tree selection, related to a "dangling pointer vulnerability." NOTE: this issue exists because of an incomplete fix for CVE-2010-2753.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nssUpgrade xulrunnerUpgrade nss-toolsUpgrade nss-pkcs11-develUpgrade firefoxUpgrade seamonkey-nspr-develUpgrade nspr-develUpgrade seamonkey-mailUpgrade nsprUpgrade seamonkeyUpgrade seamonkey-chatUpgrade thunderbirdUpgrade seamonkey-js-debuggerUpgrade seamonkey-develUpgrade seamonkey-nssUpgrade xulrunner-develUpgrade seamonkey-nss-develUpgrade nss-develUpgrade seamonkey-nsprUpgrade seamonkey-dom-inspector | Dec 1, 2016 | Sep 9, 2010 |
| Freebsd | — | Upgrade libxulUpgrade linux-firefox-develUpgrade firefoxUpgrade seamonkeyUpgrade thunderbirdUpgrade linux-firefox | Dec 10, 2025 | Sep 8, 2010 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox-bin. | Oct 30, 2017 | Sep 9, 2010 |
| Mfsa2010 54 | — | Upgrade to Mozilla Firefox version 3.6.9Upgrade to Mozilla Firefox version 3.5.12 | Jun 14, 2012 | Sep 9, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.7 | Feb 3, 2012 | Sep 9, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.7Upgrade to Mozilla Thunderbird version 3.1.3 | Feb 22, 2012 | Sep 9, 2010 |
| Oracle_linux | — | Upgrade nss-toolsUpgrade firefoxUpgrade xulrunnerUpgrade xulrunner-develUpgrade nssUpgrade nss-develUpgrade nsprUpgrade nss-pkcs11-develUpgrade nspr-devel | Oct 16, 2024 | Sep 9, 2010 |
| Suse | — | Upgrade mozilla-xulrunner191Upgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner191-x86Upgrade orbit2-32bitUpgrade mozilla-xulrunner190Upgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-toolsUpgrade gconf2Upgrade mozilla-xulrunner191-32bitUpgrade mozilla-nsprUpgrade libidl-x86Upgrade MozillaThunderbirdUpgrade MozillaFirefox-develUpgrade mozilla-nspr-32bitUpgrade MozillaFirefoxUpgrade mozilla-nss-x86Upgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-develUpgrade libfreebl3Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner190-translationsUpgrade MozillaThunderbird-translations-otherUpgrade orbit2Upgrade libidlUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner191-translationsUpgrade MozillaThunderbird-develUpgrade mozilla-nspr-x86Upgrade gconf2-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-nssUpgrade MozillaThunderbird-translations-commonUpgrade libfreebl3-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner191-gnomevfsUpgrade gconf2-x86Upgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-translations-32bitUpgrade libidl-32bitUpgrade orbit2-x86Upgrade mozilla-xulrunner190-32bitUpgrade libfreebl3-x86Upgrade mozilla-xulrunner190-x86 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade xulrunner-1.9.1Upgrade xulrunner-1.9.2Upgrade abrowserUpgrade firefoxUpgrade thunderbirdUpgrade firefox-3.5 | Nov 8, 2024 | Sep 9, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub