CVE-2011-0073
Fixed in a distro release EPSS 71%
Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange data structures, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."
Products: mozilla firefox, mozilla seamonkey
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | iceape | 2.0.11-5 |
| Debian 6.0 | icedove | 3.0.11-1+squeeze2 |
| Debian 6.0 | iceweasel | 3.5.16-7 |
| Red Hat Enterprise Linux 4 | firefox | 0:3.6.17-2.el4 |
| Red Hat Enterprise Linux 4 | firefox-debuginfo | 0:3.6.17-2.el4 |
| Red Hat Enterprise Linux 4 | seamonkey | 0:1.0.9-70.el4_8 |
| Red Hat Enterprise Linux 4 | seamonkey-chat | 0:1.0.9-70.el4_8 |
| Red Hat Enterprise Linux 4 | seamonkey-debuginfo | 0:1.0.9-70.el4_8 |
| Red Hat Enterprise Linux 4 | seamonkey-devel | 0:1.0.9-70.el4_8 |
| Red Hat Enterprise Linux 4 | seamonkey-dom-inspector | 0:1.0.9-70.el4_8 |
| Red Hat Enterprise Linux 4 | seamonkey-js-debugger | 0:1.0.9-70.el4_8 |
| Red Hat Enterprise Linux 4 | seamonkey-mail | 0:1.0.9-70.el4_8 |
| Red Hat Enterprise Linux 4 | thunderbird | 0:1.5.0.12-38.el4 |
| Red Hat Enterprise Linux 4 | thunderbird-debuginfo | 0:1.5.0.12-38.el4 |
| Red Hat Enterprise Linux 5 | firefox | 0:3.6.17-1.el5_6 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:3.6.17-1.el5_6 |
| Red Hat Enterprise Linux 5 | thunderbird | 0:2.0.0.24-17.el5_6 |
| Red Hat Enterprise Linux 5 | thunderbird-debuginfo | 0:2.0.0.24-17.el5_6 |
| Red Hat Enterprise Linux 5 | xulrunner | 0:1.9.2.17-3.el5_6 |
| Red Hat Enterprise Linux 5 | xulrunner-debuginfo | 0:1.9.2.17-3.el5_6 |
| Red Hat Enterprise Linux 5 | xulrunner-devel | 0:1.9.2.17-3.el5_6 |
| Red Hat Enterprise Linux 6 | firefox | 0:3.6.17-1.el6_0 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:3.6.17-1.el6_0 |
| Red Hat Enterprise Linux 6 | thunderbird | 0:3.1.10-1.el6_0 |
| Red Hat Enterprise Linux 6 | thunderbird-debuginfo | 0:3.1.10-1.el6_0 |
| Red Hat Enterprise Linux 6 | xulrunner | 0:1.9.2.17-4.el6_0 |
| Red Hat Enterprise Linux 6 | xulrunner-debuginfo | 0:1.9.2.17-4.el6_0 |
| Red Hat Enterprise Linux 6 | xulrunner-devel | 0:1.9.2.17-4.el6_0 |
| Red Hat rhel productivity 5 | thunderbird | 0:2.0.0.24-17.el5_6 |
| Red Hat rhel productivity 5 | thunderbird-debuginfo | 0:2.0.0.24-17.el5_6 |