NetSight
IP …
high7.6

CVE-2011-2373

Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14, when JavaScript i…

Impact

Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14, when JavaScript is disabled, allows remote attackers to execute arbitrary code via a crafted XUL document.

Affected products

VendorProductAffected versions
MozillaSeamonkey
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5
MozillaFirefox
through 3.6.17
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4
MozillaThunderbird
through 3.1.10
Versions 0.1, 0.2, 0.3, 0.4, 0.5

Weakness classification

CWE-399

References