CVE-2011-3659
Fixed in a distro release EPSS 37%
Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vectors related to incorrect AttributeChildRemoved notifications that affect access to removed nsDOMAttribute child nodes.
Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 4 | firefox | 0:3.6.26-2.el4 |
| Red Hat Enterprise Linux 4 | firefox-debuginfo | 0:3.6.26-2.el4 |
| Red Hat Enterprise Linux 5 | firefox | 0:3.6.26-1.el5_7 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:3.6.26-1.el5_7 |
| Red Hat Enterprise Linux 5 | xulrunner | 0:1.9.2.26-1.el5_7 |
| Red Hat Enterprise Linux 5 | xulrunner-debuginfo | 0:1.9.2.26-1.el5_7 |
| Red Hat Enterprise Linux 5 | xulrunner-devel | 0:1.9.2.26-1.el5_7 |
| Red Hat Enterprise Linux 6 | firefox | 0:3.6.26-1.el6_2 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:3.6.26-1.el6_2 |
| Red Hat Enterprise Linux 6 | thunderbird | 0:3.1.18-1.el6_2 |
| Red Hat Enterprise Linux 6 | thunderbird-debuginfo | 0:3.1.18-1.el6_2 |
| Red Hat Enterprise Linux 6 | xulrunner | 0:1.9.2.26-1.el6_2 |
| Red Hat Enterprise Linux 6 | xulrunner-debuginfo | 0:1.9.2.26-1.el6_2 |
| Red Hat Enterprise Linux 6 | xulrunner-devel | 0:1.9.2.26-1.el6_2 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |