Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vectors related to incorrect AttributeChildRemoved notifications that affect access to removed nsDOMAttribute child nodes.
References
Link | Resource |
---|---|
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html | Mailing List Third Party Advisory |
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html | Mailing List Third Party Advisory |
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html | Mailing List Third Party Advisory |
http://www.mandriva.com/security/advisories?name=MDVSA-2012:013 | Third Party Advisory |
http://www.mozilla.org/security/announce/2012/mfsa2012-04.html | Vendor Advisory |
https://bugzilla.mozilla.org/show_bug.cgi?id=708198 | Exploit Issue Tracking Patch Vendor Advisory |
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14697 | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2012-02-01T16:00:00
Updated: 2017-09-18T12:57:01
Reserved: 2011-09-23T00:00:00
Link: CVE-2011-3659
JSON object: View
NVD Information
Status : Analyzed
Published: 2012-02-01T16:55:00.790
Modified: 2020-08-28T13:10:40.087
Link: CVE-2011-3659
JSON object: View
Redhat Information
No data.
CWE