Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger failure of an nsXBLDocumentInfo::ReadPrototypeBindings function call, related to the cycle collector's access to a hash table containing a stale XBL binding.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-thunderbirdUpgrade seamonkeyUpgrade firefoxUpgrade thunderbirdUpgrade linux-seamonkey | Dec 10, 2025 | Feb 11, 2012 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey.Upgrade www-client/icecat.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner-bin. | Oct 30, 2017 | Feb 10, 2012 |
| Mfsa2012 10 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 10.0.1Upgrade to Mozilla Firefox version 10.0.1 | Jun 14, 2012 | Feb 10, 2012 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.7.1 | Feb 17, 2012 | Feb 10, 2012 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird ESR version 10.0.1Upgrade to Mozilla Thunderbird version 10.0.1Upgrade to the latest version of Mozilla Thunderbird | Feb 22, 2012 | Feb 10, 2012 |
| Suse | — | Upgrade MozillaFirefox-translationsUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefoxUpgrade MozillaThunderbirdUpgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-develUpgrade MozillaFirefox-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Feb 11, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub