CVE-2011-3659: Use After Free
Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vectors related to incorrect AttributeChildRemoved notifications that affect access to removed nsDOMAttribute child nodes.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3659?
CVE-2011-3659 is classified as a critical vulnerability that may allow remote attackers to execute arbitrary code.
How do I fix CVE-2011-3659?
To fix CVE-2011-3659, update affected software such as Mozilla Firefox, Thunderbird, and SeaMonkey to the latest versions.
Which versions of Mozilla Firefox are affected by CVE-2011-3659?
CVE-2011-3659 affects Mozilla Firefox versions prior to 3.6.26 and from 4.0 to 9.0.
What software products are affected by CVE-2011-3659?
CVE-2011-3659 affects Mozilla Firefox, Thunderbird, SeaMonkey, and various versions of openSUSE and SUSE Linux Enterprise.
Can CVE-2011-3659 be exploited remotely?
Yes, CVE-2011-3659 can be exploited remotely via incorrect AttributeChildRemoved notifications.