Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vectors related to incorrect AttributeChildRemoved notifications that affect access to removed nsDOMAttribute child nodes.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade xulrunner-develUpgrade xulrunner | Dec 1, 2016 | Feb 1, 2012 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade firefoxUpgrade seamonkey | Dec 10, 2025 | Feb 1, 2012 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/icecat.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Feb 1, 2012 |
| Mfsa2012 04 | — | Upgrade to Mozilla Firefox version 3.6.26Upgrade to Mozilla Firefox version 10.0 | Jun 14, 2012 | Feb 1, 2012 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.7.0 | Feb 3, 2012 | Feb 1, 2012 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 10.0Upgrade to Mozilla Thunderbird version 3.1.18 | Feb 22, 2012 | Feb 1, 2012 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.1.0.0.24.2 on Solaris 11.1 | May 29, 2017 | Feb 1, 2012 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade firefoxUpgrade xulrunner-devel | Oct 16, 2024 | Feb 1, 2012 |
| Suse | — | Upgrade mozillathunderbirdUpgrade enigmail-debuginfoUpgrade chmsee-debugsourceUpgrade mozilla-xulrunner192-debugsourceUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-jsUpgrade mozillafirefox-translations-otherUpgrade xulrunner-debuginfoUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-debuginfoUpgrade xulrunner-develUpgrade xulrunner-debuginfo-32bitUpgrade mozillathunderbird-translations-commonUpgrade mozilla-js192-32bitUpgrade mozillafirefoxUpgrade xulrunnerUpgrade seamonkey-ircUpgrade mozilla-js-debuginfoUpgrade mozillafirefox-buildsymbolsUpgrade xulrunner-debugsourceUpgrade mozillafirefox-develUpgrade mozilla-js192-debuginfo-32bitUpgrade seamonkey-translations-otherUpgrade mozilla-xulrunner192-gnome-debuginfoUpgrade mozilla-js192-debuginfoUpgrade MozillaFirefox-debuginfoUpgrade MozillaThunderbird-debugsourceUpgrade mozilla-js-32bitUpgrade mozilla-xulrunner192-translations-other-32bitUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner192-translations-commonUpgrade enigmailUpgrade mozilla-js-debuginfo-32bitUpgrade chmsee-debuginfoUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-gnomeUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192-translations-common-32bitUpgrade MozillaFirefox-debugsourceUpgrade chmseeUpgrade seamonkey-translations-commonUpgrade mozilla-xulrunner192-debuginfo-32bitUpgrade xulrunner-32bitUpgrade seamonkey-debugsourceUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-gnome-debuginfo-32bitUpgrade mozilla-xulrunner192-buildsymbolsUpgrade seamonkey-venkmanUpgrade seamonkeyUpgrade mozilla-xulrunner192-32bitUpgrade mozillafirefox-translations-commonUpgrade xulrunner-buildsymbolsUpgrade mozilla-xulrunner192-translations-otherUpgrade mozilla-js192Upgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192-devel-debuginfoUpgrade mozillathunderbird-translations-otherUpgrade MozillaThunderbird-debuginfoUpgrade seamonkey-debuginfoUpgrade seamonkey-dom-inspectorUpgrade xulrunner-devel-debuginfoUpgrade MozillaThunderbird-buildsymbols | Feb 17, 2015 | Feb 1, 2012 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Feb 1, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub