Use-after-free vulnerability in the nsHTMLSelectElement function in nsHTMLSelectElement.cpp in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allows remote attackers to execute arbitrary code via vectors involving removal of the parent node of an element.
References
Link | Resource |
---|---|
https://bugzilla.mozilla.org/show_bug.cgi?id=739343 | |
http://www.mozilla.org/security/announce/2012/mfsa2012-41.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2012-06-18 12:55
Updated : 2012-06-18 21:00
NVD link : CVE-2011-3671
Mitre link : CVE-2011-3671
JSON object : View
CWE
CWE-399
Resource Management Errors
Products Affected
mozilla
- firefox
- seamonkey
- thunderbird