Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14, when JavaScript is disabled, allows remote attackers to execute arbitrary code via a crafted XUL document.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-chatUpgrade thunderbirdUpgrade xulrunnerUpgrade seamonkey-dom-inspectorUpgrade firefoxUpgrade seamonkey-js-debuggerUpgrade seamonkey-develUpgrade seamonkeyUpgrade seamonkey-mailUpgrade xulrunner-devel | Dec 1, 2016 | Jun 30, 2011 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/icecat.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss.Upgrade www-client/firefox. | Oct 30, 2017 | Jun 30, 2011 |
| Mfsa2011 20 | — | Upgrade to Mozilla Firefox version 3.6.18Upgrade to Mozilla Firefox version 5.0 | Jun 14, 2012 | Jun 30, 2011 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.2.0 | Feb 3, 2012 | Jun 30, 2011 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.11 | Feb 22, 2012 | Jun 30, 2011 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunnerUpgrade xulrunner-devel | Oct 16, 2024 | Jun 30, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 21, 2011 |
| Suse | — | Upgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-gnome-32bitUpgrade MozillaFirefoxUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-gnomeUpgrade MozillaThunderbirdUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-develUpgrade MozillaThunderbird-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Jun 30, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub