NetSight
IP …
critical10.0

CVE-2011-0085

Use-after-free vulnerability in the nsXULCommandDispatcher function in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 a…

Impact

Use-after-free vulnerability in the nsXULCommandDispatcher function in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via a crafted XUL document that dequeues the current command updater.

Affected products

VendorProductAffected versions
MozillaSeamonkey
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5
MozillaFirefox
through 3.6.17
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4
MozillaThunderbird
through 3.1.10
Versions 0.1, 0.2, 0.3, 0.4, 0.5

Weakness classification

CWE-399

References