Use-after-free vulnerability in the nsINode::GetParentNode function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors involving a DOM modification at the time of a SetBody mutation event.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-seamonkeyUpgrade linux-firefoxUpgrade linux-thunderbirdUpgrade seamonkeyUpgrade thunderbirdUpgrade firefox | Dec 10, 2025 | Aug 8, 2013 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Aug 6, 2013 |
| Mfsa2013 64 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 23.0 | Aug 7, 2013 | Aug 6, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.20.0 | Dec 8, 2014 | Aug 6, 2013 |
| Suse | — | Upgrade mozilla-nsprUpgrade seamonkey-venkmanUpgrade MozillaThunderbird-buildsymbolsUpgrade xulrunner-32bitUpgrade mozilla-nss-certsUpgrade libfreebl3Upgrade MozillaThunderbird-develUpgrade mozilla-nss-certs-32bitUpgrade xulrunner-develUpgrade seamonkeyUpgrade mozilla-nss-sysinit-32bitUpgrade seamonkey-translations-commonUpgrade libsoftokn3Upgrade libfreebl3-32bitUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-develUpgrade mozilla-nssUpgrade mozilla-nss-toolsUpgrade xulrunnerUpgrade mozilla-nss-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozillafirefox-buildsymbolsUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-jsUpgrade seamonkey-dom-inspectorUpgrade MozillaFirefox-develUpgrade MozillaThunderbird-translations-otherUpgrade seamonkey-translations-otherUpgrade xulrunner-buildsymbolsUpgrade seamonkey-ircUpgrade MozillaFirefox-translations-commonUpgrade mozilla-js-32bitUpgrade MozillaThunderbirdUpgrade libsoftokn3-32bitUpgrade enigmailUpgrade mozilla-nss-sysinitUpgrade MozillaFirefoxUpgrade mozilla-nspr-develUpgrade MozillaThunderbird-translations-common | Feb 17, 2015 | Aug 6, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Aug 7, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub