Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OGG headers in a .ogg file.
CVSS Details
- CVSS 3.1 Base Score: 9.6
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-thunderbirdUpgrade libxulUpgrade linux-firefoxUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade firefox | Dec 10, 2025 | Sep 28, 2011 |
| Gentoo Linux | — | Upgrade dev-libs/nss.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/firefox.Upgrade www-client/seamonkey-bin.Upgrade www-client/icecat.Upgrade www-client/seamonkey.Upgrade mail-client/mozilla-thunderbird. | Oct 30, 2017 | Sep 28, 2011 |
| Mfsa2011 44 | — | Upgrade to Mozilla Firefox version 7.0 | Jun 14, 2012 | Sep 28, 2011 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.4.0 | Feb 3, 2012 | Sep 28, 2011 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 7.0 | Feb 22, 2012 | Sep 28, 2011 |
| Oracle Solaris | — | Upgrade mail/thunderbird to version 7.0.1-0.175.0.2.0.2.0 on Solaris 11.0Upgrade web/browser/firefox to version 8.0-0.175.0.3.0.4.0 on Solaris 11.0Upgrade web/data/firefox-bookmarks to version 8.0-0.175.0.3.0.4.0 on Solaris 11.0Upgrade web/browser/firefox/multi-user-desktop to version 8.0-0.175.0.3.0.4.0 on Solaris 11.0Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 7.0.1-0.175.0.2.0.2.0 on Solaris 11.0 | May 29, 2017 | Sep 28, 2011 |
| Suse | — | Upgrade MozillaFirefox-translationsUpgrade MozillaThunderbirdUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefoxUpgrade MozillaThunderbird-develUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-devel | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Sep 29, 2011 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub