Use-after-free vulnerability in the JS_GetGlobalForScopeChain function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code by leveraging incorrect garbage collection in situations involving default compartments and frame-chain restoration.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-firefoxUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade firefoxUpgrade thunderbirdUpgrade linux-thunderbird | Dec 10, 2025 | Aug 18, 2013 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox. | Oct 30, 2017 | Sep 18, 2013 |
| Mfsa2013 92 | — | Upgrade to Mozilla Firefox version 24.0Upgrade to the latest version of Mozilla Firefox | Sep 25, 2013 | Sep 18, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.21.0 | Dec 8, 2014 | Sep 18, 2013 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 24.0 | Sep 25, 2013 | Sep 18, 2013 |
| Suse | — | Upgrade MozillaThunderbirdUpgrade MozillaThunderbird-translations-otherUpgrade seamonkeyUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-develUpgrade seamonkey-venkmanUpgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbird-buildsymbolsUpgrade mozillafirefox-branding-upstreamUpgrade mozillafirefox-buildsymbolsUpgrade MozillaThunderbird-translations-commonUpgrade seamonkey-translations-commonUpgrade MozillaThunderbird-develUpgrade seamonkey-ircUpgrade MozillaFirefoxUpgrade enigmailUpgrade seamonkey-translations-otherUpgrade seamonkey-dom-inspector | Dec 12, 2013 | Sep 18, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Sep 18, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub