Vulnerability · NVD

CVE-2011-0085

N/A Published on 2011-06-30

Use-after-free vulnerability in the nsXULCommandDispatcher function in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via a crafted XUL document that dequeues the current command updater.

EPSS 5.53% above median percentile 92.1%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Mozilla Thunderbird Windows winget:Mozilla.Thunderbird

Affected — Fixed in — Latest tracked 153.0.2 undetermined

Vulnerable CPE configurations (84)

Vendor	Product	Platform	Versions	CPE 2.3 URI
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	≤3.1.10	cpe:2.3:a:mozilla:thunderbird::::::::
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.2:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.3:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.4:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.5:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.6:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7.2:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7.3:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.8:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.9:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.2:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.3:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.4:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.5:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.6:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.7:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.8:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5:beta2::::::
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.2:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.3:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.4:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.5:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.6:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.7:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.8:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.9:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.10:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.11:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.12:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.13:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.14:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.2:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.7.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.7.3:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.0:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.2:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.3:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.4:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.5:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.6:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.7:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.8:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.9:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.12:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.14:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.16:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.17:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.18:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.19:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.21:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.22:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.23:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.2:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.3:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.4:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.5:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.6:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.7:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.8:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.9:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.10:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.11:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.2:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.3:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.4:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.5:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.6:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.7:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.8:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.9:::::::*

View on NVD ↗ Advisory · www.mozilla.org