CVE-2011-3659
NoneCVSS
—
EPSS
36.8%
Published
Feb 1, 2012
CISA due date
—
The record
Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vectors related to incorrect AttributeChildRemoved notifications that affect access to removed nsDOMAttribute child nodes.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:4::as | firefox | 0 | 0:3.6.26-2.el4 |
| Red Hat:enterprise_linux:4::as | firefox-debuginfo | 0 | 0:3.6.26-2.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox | 0 | 0:3.6.26-2.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox-debuginfo | 0 | 0:3.6.26-2.el4 |
| Red Hat:enterprise_linux:4::es | firefox | 0 | 0:3.6.26-2.el4 |
| Red Hat:enterprise_linux:4::es | firefox-debuginfo | 0 | 0:3.6.26-2.el4 |
| Red Hat:enterprise_linux:4::ws | firefox | 0 | 0:3.6.26-2.el4 |
| Red Hat:enterprise_linux:4::ws | firefox-debuginfo | 0 | 0:3.6.26-2.el4 |
| Red Hat:enterprise_linux:5::client | firefox | 0 | 0:3.6.26-1.el5_7 |
| Red Hat:enterprise_linux:5::client | firefox-debuginfo | 0 | 0:3.6.26-1.el5_7 |
| Red Hat:enterprise_linux:5::client | xulrunner | 0 | 0:1.9.2.26-1.el5_7 |
| Red Hat:enterprise_linux:5::client | xulrunner-debuginfo | 0 | 0:1.9.2.26-1.el5_7 |
| Red Hat:enterprise_linux:5::client | xulrunner-devel | 0 | 0:1.9.2.26-1.el5_7 |
| Red Hat:enterprise_linux:5::client_workstation | xulrunner | 0 | 0:1.9.2.26-1.el5_7 |
| Red Hat:enterprise_linux:5::client_workstation | xulrunner-debuginfo | 0 | 0:1.9.2.26-1.el5_7 |
| Red Hat:enterprise_linux:5::client_workstation | xulrunner-devel | 0 | 0:1.9.2.26-1.el5_7 |
| Red Hat:enterprise_linux:5::server | firefox | 0 | 0:3.6.26-1.el5_7 |
| Red Hat:enterprise_linux:5::server | firefox-debuginfo | 0 | 0:3.6.26-1.el5_7 |
| Red Hat:enterprise_linux:5::server | xulrunner | 0 | 0:1.9.2.26-1.el5_7 |
| Red Hat:enterprise_linux:5::server | xulrunner-debuginfo | 0 | 0:1.9.2.26-1.el5_7 |
| Red Hat:enterprise_linux:5::server | xulrunner-devel | 0 | 0:1.9.2.26-1.el5_7 |
| Red Hat:enterprise_linux:6::client | firefox | 0 | 0:3.6.26-1.el6_2 |
| Red Hat:enterprise_linux:6::client | firefox-debuginfo | 0 | 0:3.6.26-1.el6_2 |
| Red Hat:enterprise_linux:6::client | thunderbird | 0 | 0:3.1.18-1.el6_2 |
| Red Hat:enterprise_linux:6::client | thunderbird-debuginfo | 0 | 0:3.1.18-1.el6_2 |
| Red Hat:enterprise_linux:6::client | xulrunner | 0 | 0:1.9.2.26-1.el6_2 |
| Red Hat:enterprise_linux:6::client | xulrunner-debuginfo | 0 | 0:1.9.2.26-1.el6_2 |
| Red Hat:enterprise_linux:6::client | xulrunner-devel | 0 | 0:1.9.2.26-1.el6_2 |
| Red Hat:enterprise_linux:6::computenode | firefox | 0 | 0:3.6.26-1.el6_2 |
| Red Hat:enterprise_linux:6::computenode | firefox-debuginfo | 0 | 0:3.6.26-1.el6_2 |
| Red Hat:enterprise_linux:6::computenode | xulrunner | 0 | 0:1.9.2.26-1.el6_2 |
| Red Hat:enterprise_linux:6::computenode | xulrunner-debuginfo | 0 | 0:1.9.2.26-1.el6_2 |
| Red Hat:enterprise_linux:6::computenode | xulrunner-devel | 0 | 0:1.9.2.26-1.el6_2 |
| Red Hat:enterprise_linux:6::server | firefox | 0 | 0:3.6.26-1.el6_2 |
| Red Hat:enterprise_linux:6::server | firefox-debuginfo | 0 | 0:3.6.26-1.el6_2 |
| Red Hat:enterprise_linux:6::server | thunderbird | 0 | 0:3.1.18-1.el6_2 |
| Red Hat:enterprise_linux:6::server | thunderbird-debuginfo | 0 | 0:3.1.18-1.el6_2 |
| Red Hat:enterprise_linux:6::server | xulrunner | 0 | 0:1.9.2.26-1.el6_2 |
| Red Hat:enterprise_linux:6::server | xulrunner-debuginfo | 0 | 0:1.9.2.26-1.el6_2 |
| Red Hat:enterprise_linux:6::server | xulrunner-devel | 0 | 0:1.9.2.26-1.el6_2 |
| Red Hat:enterprise_linux:6::workstation | firefox | 0 | 0:3.6.26-1.el6_2 |
| Red Hat:enterprise_linux:6::workstation | firefox-debuginfo | 0 | 0:3.6.26-1.el6_2 |
| Red Hat:enterprise_linux:6::workstation | thunderbird | 0 | 0:3.1.18-1.el6_2 |
| Red Hat:enterprise_linux:6::workstation | thunderbird-debuginfo | 0 | 0:3.1.18-1.el6_2 |
| Red Hat:enterprise_linux:6::workstation | xulrunner | 0 | 0:1.9.2.26-1.el6_2 |
| Red Hat:enterprise_linux:6::workstation | xulrunner-debuginfo | 0 | 0:1.9.2.26-1.el6_2 |
| Red Hat:enterprise_linux:6::workstation | xulrunner-devel | 0 | 0:1.9.2.26-1.el6_2 |
| openSUSE:Tumbleweed | MozillaFirefox | 0 | 50.1.0-1.1 |
| openSUSE:Tumbleweed | MozillaThunderbird | 0 | 45.5.1-1.1 |
| openSUSE:Tumbleweed | firefox-esr | 0 | 128.5.1-1.1 |
Related vulnerabilities
- CVE-2011-3026 Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote… Also affects firefox
- CVE-2011-2371 Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x… Also affects firefox
- CVE-2011-0073 Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does… Also affects firefox
- CVE-2011-0065 Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17… Also affects firefox
- CVE-2010-3765 Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before… Also affects firefox
- CVE-2010-3179 Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before… Also affects firefox
- CVE-2010-1205 Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in… Also affects firefox
- CVE-2010-1199 Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before… Also affects firefox