Use After Free Affecting seamonkey package, versions [,2.7)


Severity

Recommended
0.0
high
0
10

CVSS assessment made by Snyk's Security Team. Learn more

Threat Intelligence

Exploit Maturity
Mature
EPSS
92.26% (100th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Use After Free vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-UNMANAGED-SEAMONKEY-2379813
  • published26 Jan 2022
  • disclosed1 Feb 2012
  • creditUnknown

Introduced: 1 Feb 2012

CVE-2011-3659  (opens in a new tab)
CWE-416  (opens in a new tab)

How to fix?

Upgrade seamonkey to version 2.7 or higher.

Overview

Affected versions of this package are vulnerable to Use After Free. Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vectors related to incorrect AttributeChildRemoved notifications that affect access to removed nsDOMAttribute child nodes.

CVSS Scores

version 3.1