NetSight
IP …
critical9.3Public exploit code

CVE-2011-3659

Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 migh…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vectors related to incorrect AttributeChildRemoved notifications that affect access to removed nsDOMAttribute child nodes.

Affected products

VendorProductAffected versions
MozillaFirefox
before 3.6.26
from 4.0 before 10.0
MozillaSeamonkey
before 2.7
MozillaThunderbird
before 3.1.18
from 5.0 before 10.0
OpensuseOpensuse
Version 11.4
SuseLinux Enterprise Desktop
Versions 10, 11
SuseLinux Enterprise Server
Versions 10, 11
SuseLinux Enterprise Software Development Kit
Versions 10, 11

Weakness classification

CWE-416

References