Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade seamonkey-chatUpgrade firefoxUpgrade seamonkey-dom-inspectorUpgrade seamonkey-mailUpgrade seamonkey-nsprUpgrade xulrunnerUpgrade xulrunner-develUpgrade seamonkey-nspr-develUpgrade seamonkey-nss-develUpgrade seamonkey-nssUpgrade seamonkey-develUpgrade seamonkey-js-debuggerUpgrade seamonkey | Dec 1, 2016 | Oct 27, 2010 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade libxulUpgrade linux-firefox-develUpgrade linux-firefoxUpgrade firefoxUpgrade thunderbird | Dec 10, 2025 | Oct 28, 2010 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Oct 27, 2010 |
| Mfsa2010 73 | — | Upgrade to Mozilla Firefox version 3.5.15Upgrade to Mozilla Firefox version 3.6.12 | Jun 14, 2012 | Oct 27, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.10 | Feb 3, 2012 | Oct 27, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.6Upgrade to Mozilla Thunderbird version 3.0.10 | Feb 22, 2012 | Oct 27, 2010 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade xulrunner | Oct 16, 2024 | Oct 27, 2010 |
| Suse | — | Upgrade mozilla-nssUpgrade mozilla-xulrunner191-translations-otherUpgrade mozillafirefox-branding-sledUpgrade mozilla-xulrunner192-x86Upgrade mozillathunderbird-translations-commonUpgrade gconf2-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner191-translations-commonUpgrade mozilla-js192Upgrade MozillaThunderbird-develUpgrade seamonkey-venkmanUpgrade libfreebl3-x86Upgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner191Upgrade python-xpcom191Upgrade orbit2Upgrade libidl-x86Upgrade gconf2Upgrade mozilla-xulrunner191-translationsUpgrade mozillafirefoxUpgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade mozilla-xulrunner192-translations-commonUpgrade libfreebl3Upgrade mozilla-xulrunner191-32bitUpgrade mozilla-js192-32bitUpgrade orbit2-x86Upgrade seamonkey-translations-commonUpgrade mozilla-xulrunner192-translations-other-32bitUpgrade orbit2-32bitUpgrade mozilla-xulrunner191-develUpgrade mozilla-nspr-32bitUpgrade libidl-32bitUpgrade enigmailUpgrade mozilla-nspr-x86Upgrade libfreebl3-32bitUpgrade mozillafirefox-branding-upstreamUpgrade seamonkey-translations-otherUpgrade mozilla-xulrunner192-translations-otherUpgrade mozilla-xulrunner192-gnomeUpgrade mozillathunderbird-translations-otherUpgrade mozilla-xulrunner192-buildsymbolsUpgrade mozilla-nsprUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner192-translationsUpgrade mozillafirefox-translations-otherUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozillafirefox-translations-commonUpgrade seamonkeyUpgrade mozilla-xulrunner192-develUpgrade mozillathunderbirdUpgrade seamonkey-ircUpgrade gconf2-x86Upgrade mozilla-xulrunner192-32bitUpgrade mozilla-nss-x86Upgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-translations-common-32bitUpgrade seamonkey-dom-inspectorUpgrade libidl | Feb 17, 2015 | Oct 27, 2010 |
| Ubuntu | — | Upgrade xulrunner-1.9.1Upgrade xulrunner-1.9.2Upgrade abrowserUpgrade firefox-3.0Upgrade firefox-3.5Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Oct 28, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub