high7.5
CVE-2011-3671
Use-after-free vulnerability in the nsHTMLSelectElement function in nsHTMLSelectElement.cpp in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, an…
Impact
Use-after-free vulnerability in the nsHTMLSelectElement function in nsHTMLSelectElement.cpp in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allows remote attackers to execute arbitrary code via vectors involving removal of the parent node of an element.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | Versions 4.0, 4.0.1, 5.0, 5.0.1, 6.0, 6.0.1 |
| Mozilla | Seamonkey | through 2.5 Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4 |
| Mozilla | Thunderbird | Versions 5.0, 6.0, 6.0.1, 6.0.2, 7.0, 7.0.1 |