Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vectors related to incorrect AttributeChildRemoved notifications that affect access to removed nsDOMAttribute child nodes.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade xulrunner-develUpgrade xulrunner | Dec 1, 2016 | Feb 1, 2012 |
| Freebsd | — | Upgrade seamonkeyUpgrade thunderbirdUpgrade linux-firefoxUpgrade linux-seamonkeyUpgrade firefoxUpgrade linux-thunderbird | Dec 10, 2025 | Feb 1, 2012 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade dev-libs/nss.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner.Upgrade www-client/icecat. | Oct 30, 2017 | Feb 1, 2012 |
| Mfsa2012 04 | — | Upgrade to Mozilla Firefox version 10.0Upgrade to Mozilla Firefox version 3.6.26Upgrade to the latest version of Mozilla Firefox | Jun 14, 2012 | Feb 1, 2012 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.7.0 | Feb 3, 2012 | Feb 1, 2012 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.18Upgrade to Mozilla Thunderbird version 10.0Upgrade to the latest version of Mozilla Thunderbird | Feb 22, 2012 | Feb 1, 2012 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.1.0.0.24.2 on Solaris 11.1 | May 29, 2017 | Feb 1, 2012 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade xulrunner | Oct 16, 2024 | Feb 1, 2012 |
| Suse | — | Upgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbird-develUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-gnome-32bitUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefoxUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade xulrunner-1.9.2Upgrade thunderbird | Nov 8, 2024 | Feb 1, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub