Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange data structures, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-js-debuggerUpgrade seamonkey-mailUpgrade seamonkey-chatUpgrade seamonkey-develUpgrade xulrunnerUpgrade xulrunner-develUpgrade seamonkeyUpgrade seamonkey-dom-inspectorUpgrade thunderbirdUpgrade firefox | Dec 1, 2016 | May 7, 2011 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade www-client/seamonkey-bin.Upgrade www-client/icecat. | Oct 30, 2017 | May 7, 2011 |
| Mfsa2011 13 | — | Upgrade to Mozilla Firefox version 3.5.19Upgrade to Mozilla Firefox version 3.6.17 | Jun 14, 2012 | May 7, 2011 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.14 | Feb 3, 2012 | May 7, 2011 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade firefoxUpgrade thunderbirdUpgrade xulrunner-devel | Oct 16, 2024 | May 7, 2011 |
| Suse | — | Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-gnome-32bitUpgrade MozillaFirefoxUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-develUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.1Upgrade thunderbirdUpgrade firefoxUpgrade xulrunner-1.9.2 | Nov 8, 2024 | May 7, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub