Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code by triggering improper garbage collection.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade firefox | Dec 1, 2016 | Dec 11, 2013 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade firefox | Dec 10, 2025 | Dec 14, 2013 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nspr.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Dec 11, 2013 |
| Mfsa2013 109 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 24.2Upgrade to Mozilla Firefox version 26.0 | Dec 12, 2013 | Dec 10, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.23.0 | Dec 8, 2014 | Dec 11, 2013 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 24.2 | Dec 12, 2013 | Dec 10, 2013 |
| Oracle Solaris | — | Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Dec 11, 2013 |
| Oracle_linux | — | Upgrade thunderbirdUpgrade firefox | Oct 16, 2024 | Dec 11, 2013 |
| Suse | — | Upgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade firefox-libgcc_s1-32bitUpgrade mozilla-xulrunner191-32bitUpgrade firefox-pango-32bitUpgrade firefox-pixman-32bitUpgrade mozilla-nspr-develUpgrade mozilla-nssUpgrade MozillaThunderbird-translations-commonUpgrade firefox-pcre-32bitUpgrade firefox-pcreUpgrade libsoftokn3Upgrade libfreebl3Upgrade firefox-gtk2Upgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-otherUpgrade firefox-cairo-32bitUpgrade firefox-gtk2-32bitUpgrade sle-sdk-releaseUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner191-translations-32bitUpgrade firefox-libgcc_s1Upgrade seamonkeyUpgrade firefox-freetype2-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade MozillaThunderbirdUpgrade firefox-glib2Upgrade libfreebl3-x86Upgrade mozilla-xulrunner192-translations-32bitUpgrade firefox-fontconfig-32bitUpgrade firefox-glib2-32bitUpgrade mozillafirefox-branding-upstreamUpgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner192Upgrade firefox-cairoUpgrade seamonkey-venkmanUpgrade mozilla-nspr-32bitUpgrade firefox-fontconfigUpgrade firefox-pixmanUpgrade libsoftokn3-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade firefox-libstdc++6Upgrade firefox-atkUpgrade firefox-libstdc++6-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner191-translationsUpgrade firefox-freetype2Upgrade mozilla-xulrunner192-gnome-32bitUpgrade seamonkey-translations-commonUpgrade mozilla-xulrunner192-32bitUpgrade firefox-gtk2-langUpgrade mozilla-nss-toolsUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-nss-develUpgrade enigmailUpgrade mozilla-xulrunner191Upgrade mozilla-nsprUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaThunderbird-buildsymbolsUpgrade firefox-pangoUpgrade seamonkey-dom-inspectorUpgrade seamonkey-ircUpgrade firefox-atk-32bitUpgrade MozillaFirefoxUpgrade seamonkey-translations-otherUpgrade MozillaFirefox-translationsUpgrade mozilla-nss-32bitUpgrade mozilla-nss-x86Upgrade libsoftokn3-x86Upgrade libfreebl3-32bit | Feb 17, 2015 | Dec 11, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Dec 11, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub