CVE-2011-3671

No fix known EPSS 2%

Use-after-free vulnerability in the nsHTMLSelectElement function in nsHTMLSelectElement.cpp in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allows remote attackers to execute arbitrary code via vectors involving removal of the parent node of an element.

Published 2012-06-18 · CVE record · OSV

Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird