critical10.0Public exploit code

CVE-2011-0065

Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrar…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Mozilla Firefox 3.6.16 (OSX) - mChannel Use-After-Free (Metasploit) (2)2012-01-17 · remote · osx · Verified
Mozilla Firefox 3.6.16 (Windows 7) - mChannel Object Use-After-Free2011-08-16 · remote · windows · Verified
Mozilla Firefox 3.6.16 (Windows) - mChannel Use-After-Free (Metasploit) (1)2011-08-10 · remote · windows · Verified
Mozilla Firefox 3.6.16 - OBJECT mChannel Remote Code Execution (DEP Bypass) (Metasploit)2011-08-05 · remote · windows · Verified

Impact

Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mChannel.

Affected products

Vendor	Product	Affected versions
Mozilla	Firefox	Versions 3.6, 3.6.2, 3.6.3, 3.6.4, 3.6.6, 3.6.7
Mozilla	Seamonkey	through 2.0.13 Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4

Weakness classification

CWE-399

Public exploit code

Impact

Affected products

Weakness classification

References