Use-after-free vulnerability in the nsTreeSelection function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via vectors involving a XUL tree selection, related to a "dangling pointer vulnerability." NOTE: this issue exists because of an incomplete fix for CVE-2010-2753.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nss-develUpgrade seamonkey-js-debuggerUpgrade seamonkey-develUpgrade seamonkey-nss-develUpgrade seamonkey-nsprUpgrade seamonkey-nssUpgrade xulrunner-develUpgrade seamonkey-dom-inspectorUpgrade nsprUpgrade seamonkeyUpgrade xulrunnerUpgrade firefoxUpgrade seamonkey-chatUpgrade nss-pkcs11-develUpgrade seamonkey-mailUpgrade nspr-develUpgrade thunderbirdUpgrade seamonkey-nspr-develUpgrade nssUpgrade nss-tools | Dec 1, 2016 | Sep 9, 2010 |
| Freebsd | — | Upgrade firefoxUpgrade linux-firefox-develUpgrade libxulUpgrade thunderbirdUpgrade seamonkeyUpgrade linux-firefox | Dec 10, 2025 | Sep 8, 2010 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey-bin.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Sep 9, 2010 |
| Mfsa2010 54 | — | Upgrade to Mozilla Firefox version 3.5.12Upgrade to Mozilla Firefox version 3.6.9 | Jun 14, 2012 | Sep 9, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.7 | Feb 3, 2012 | Sep 9, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.3Upgrade to Mozilla Thunderbird version 3.0.7 | Feb 22, 2012 | Sep 9, 2010 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade nssUpgrade firefoxUpgrade nss-toolsUpgrade nss-pkcs11-develUpgrade nss-develUpgrade nsprUpgrade nspr-devel | Oct 16, 2024 | Sep 9, 2010 |
| Suse | — | Upgrade mozilla-xulrunner191-gnomevfsUpgrade MozillaFirefox-translationsUpgrade libfreebl3-32bitUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-nssUpgrade libfreebl3-x86Upgrade mozilla-xulrunner190-x86Upgrade libidl-32bitUpgrade gconf2-32bitUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner192-x86Upgrade orbit2-x86Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-nspr-x86Upgrade gconf2-x86Upgrade mozilla-xulrunner192Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner191-32bitUpgrade libfreebl3Upgrade libidlUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-nsprUpgrade mozilla-xulrunner191-x86Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191-translationsUpgrade MozillaFirefox-develUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-x86Upgrade MozillaThunderbirdUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner190-gnomevfsUpgrade orbit2Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-otherUpgrade libidl-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner190Upgrade gconf2Upgrade orbit2-32bitUpgrade MozillaThunderbird-translations-other | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefox-3.5Upgrade xulrunner-1.9.2Upgrade abrowserUpgrade firefoxUpgrade xulrunner-1.9.1Upgrade thunderbirdUpgrade firefox-3.0 | Nov 8, 2024 | Sep 9, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub