Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OGG headers in a .ogg file.
CVSS Details
- CVSS 3.1 Base Score: 9.6
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-thunderbirdUpgrade libxulUpgrade linux-firefoxUpgrade thunderbirdUpgrade firefoxUpgrade linux-seamonkeyUpgrade seamonkey | Dec 10, 2025 | Sep 28, 2011 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird-bin. | Oct 30, 2017 | Sep 28, 2011 |
| Mfsa2011 44 | — | Upgrade to Mozilla Firefox version 7.0 | Jun 14, 2012 | Sep 28, 2011 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.4.0 | Feb 3, 2012 | Sep 28, 2011 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 7.0 | Feb 22, 2012 | Sep 28, 2011 |
| Oracle Solaris | — | Upgrade web/browser/firefox to version 8.0-0.175.0.3.0.4.0 on Solaris 11.0Upgrade mail/thunderbird to version 7.0.1-0.175.0.2.0.2.0 on Solaris 11.0Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 7.0.1-0.175.0.2.0.2.0 on Solaris 11.0Upgrade web/data/firefox-bookmarks to version 8.0-0.175.0.3.0.4.0 on Solaris 11.0Upgrade web/browser/firefox/multi-user-desktop to version 8.0-0.175.0.3.0.4.0 on Solaris 11.0 | May 29, 2017 | Sep 28, 2011 |
| Suse | — | Upgrade MozillaFirefox-develUpgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbird-develUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translationsUpgrade MozillaThunderbirdUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-common | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Sep 29, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub