Mozilla Firefox/SeaMonkey OBJECT 'mObserverList' Use-After-Free Remote Code Execution Vulnerability
BID:47662
Info
Mozilla Firefox/SeaMonkey OBJECT 'mObserverList' Use-After-Free Remote Code Execution Vulnerability
| Bugtraq ID: | 47662 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2011-0066 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 28 2011 12:00AM |
| Updated: | Apr 16 2015 05:42PM |
| Credit: | regenrecht |
| Vulnerable: |
Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 ARM Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise Server 11 SP1 SuSE SUSE Linux Enterprise Server 10 SP4 SuSE SUSE Linux Enterprise Server 10 SP3 SuSE SUSE Linux Enterprise SDK 11 SP1 SuSE SUSE Linux Enterprise SDK 10 SP4 SuSE SUSE Linux Enterprise Desktop 11 SP1 SuSE SUSE Linux Enterprise Desktop 10 SP4 SuSE openSUSE 11.4 SuSE openSUSE 11.3 Slackware Linux x86_64 -current Slackware Linux 13.37 x86_64 Slackware Linux 13.37 Slackware Linux 13.1 x86_64 Slackware Linux 13.1 Slackware Linux 13.0 x86_64 Slackware Linux 13.0 Slackware Linux 12.2 Slackware Linux -current S.u.S.E. openSUSE 11.2 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux ES 4 RedHat Enterprise Linux Desktop Workstation 5 client RedHat Enterprise Linux Desktop version 4 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux AS 4 Red Hat Enterprise Linux 5 Server Mozilla SeaMonkey 2.0.11 Mozilla SeaMonkey 2.0.9 Mozilla SeaMonkey 2.0.8 Mozilla SeaMonkey 2.0.5 Mozilla SeaMonkey 2.0.4 Mozilla SeaMonkey 2.0.3 Mozilla SeaMonkey 2.0.2 Mozilla SeaMonkey 2.0.1 Mozilla SeaMonkey 2.0.9 Mozilla SeaMonkey 2.0.7 Mozilla SeaMonkey 2.0.6 Mozilla SeaMonkey 2.0.5 Mozilla SeaMonkey 2.0.4 Mozilla SeaMonkey 2.0.13 Mozilla SeaMonkey 2.0.12 Mozilla SeaMonkey 2.0.10 Mozilla SeaMonkey 2.0 Rc2 Mozilla SeaMonkey 2.0 Rc1 Mozilla SeaMonkey 2.0 Beta 2 Mozilla SeaMonkey 2.0 Beta 1 Mozilla SeaMonkey 2.0 Alpha 3 Mozilla SeaMonkey 2.0 Alpha 2 Mozilla SeaMonkey 2.0 Alpha 1 Mozilla SeaMonkey 2.0 Mozilla Firefox 3.6.13 Mozilla Firefox 3.6.10 Mozilla Firefox 3.6.9 Mozilla Firefox 3.6.8 Mozilla Firefox 3.6.6 Mozilla Firefox 3.6.4 Mozilla Firefox 3.6.3 Mozilla Firefox 3.6.2 Mozilla Firefox 3.5.17 Mozilla Firefox 3.5.16 Mozilla Firefox 3.5.14 Mozilla Firefox 3.5.13 Mozilla Firefox 3.5.10 Mozilla Firefox 3.5.9 Mozilla Firefox 3.5.8 Mozilla Firefox 3.5.7 Mozilla Firefox 3.5.6 Mozilla Firefox 3.5.5 Mozilla Firefox 3.5.4 Mozilla Firefox 3.5.3 Mozilla Firefox 3.5.2 Mozilla Firefox 3.5.1 Mozilla Firefox 3.5 Mozilla Firefox 4.0 Beta1 Mozilla Firefox 3.6.7 Mozilla Firefox 3.6.6 Mozilla Firefox 3.6.16 Mozilla Firefox 3.6.15 Mozilla Firefox 3.6.14 Mozilla Firefox 3.6.12 Mozilla Firefox 3.6.11 Mozilla Firefox 3.6 Beta 3 Mozilla Firefox 3.6 Beta 2 Mozilla Firefox 3.6 Mozilla Firefox 3.5.18 Mozilla Firefox 3.5.17 Mozilla Firefox 3.5.15 Mozilla Firefox 3.5.12 Mozilla Firefox 3.5.11 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Avaya Messaging Storage Server 5.2.8 Avaya Messaging Storage Server 5.2.2 Avaya Messaging Storage Server 5.2 SP3 Avaya Messaging Storage Server 5.2 SP2 Avaya Messaging Storage Server 5.2 SP1 Avaya Messaging Storage Server 5.2 Avaya Messaging Storage Server 5.1 SP2 Avaya Messaging Storage Server 5.1 SP1 Avaya Messaging Storage Server 5.1 Avaya Messaging Storage Server 5.0 Avaya Messaging Storage Server 4.0 Avaya Message Networking 5.2.1 Avaya Message Networking 5.2.3 Avaya Message Networking 5.2.2 Avaya Message Networking 5.2 SP1 Avaya Message Networking 5.2 Avaya Message Networking 3.1 Avaya IQ 5.2 Avaya IQ 5.1 Avaya IQ 5 Avaya Aura System Manager 6.2 Avaya Aura System Manager 6.1.1 Avaya Aura System Manager 6.1 SP2 Avaya Aura System Manager 6.1 Sp1 Avaya Aura System Manager 6.1 Avaya Aura System Manager 6.0 SP1 Avaya Aura System Manager 6.0 Avaya Aura System Manager 5.2 Avaya Aura Session Manager 6.1.3 Avaya Aura Session Manager 6.1.2 Avaya Aura Session Manager 6.1.1 Avaya Aura Session Manager 6.1 SP2 Avaya Aura Session Manager 6.1 Sp1 Avaya Aura Session Manager 6.1 Avaya Aura Session Manager 6.0 Avaya Aura Session Manager 5.2 Avaya Aura Session Manager 1.1 Avaya Aura Presence Services 6.1.1 Avaya Aura Presence Services 6.1 Avaya Aura Presence Services 6.0 |
| Not Vulnerable: |
Mozilla SeaMonkey 2.0.14 Mozilla Firefox 4.0.1 Mozilla Firefox 4.0 Mozilla Firefox 3.6.17 Mozilla Firefox 3.5.19 |
Discussion
Mozilla Firefox/SeaMonkey OBJECT 'mObserverList' Use-After-Free Remote Code Execution Vulnerability
Mozilla Firefox and SeaMonkey are prone to a remote code-execution vulnerability because of a use-after-free error.
An attacker can exploit this issue by enticing an unsuspecting user into viewing malicious content. A successful exploit will result in the execution of arbitrary attacker-supplied code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions.
This issue is fixed in:
Firefox 3.6.17
Firefox 3.5.19
SeaMonkey 2.0.14
NOTE: This issue was previously discussed in BID 47635 (Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2011-12 through -18 Multiple Vulnerabilities) but has been moved to its own record to better document it.
Mozilla Firefox and SeaMonkey are prone to a remote code-execution vulnerability because of a use-after-free error.
An attacker can exploit this issue by enticing an unsuspecting user into viewing malicious content. A successful exploit will result in the execution of arbitrary attacker-supplied code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions.
This issue is fixed in:
Firefox 3.6.17
Firefox 3.5.19
SeaMonkey 2.0.14
NOTE: This issue was previously discussed in BID 47635 (Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2011-12 through -18 Multiple Vulnerabilities) but has been moved to its own record to better document it.
Exploit / POC
Mozilla Firefox/SeaMonkey OBJECT 'mObserverList' Use-After-Free Remote Code Execution Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Mozilla Firefox/SeaMonkey OBJECT 'mObserverList' Use-After-Free Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references for more information.
Slackware Linux 12.2
Slackware Linux 13.1
SuSE openSUSE 11.4
Slackware Linux x86_64 -current
Slackware Linux 13.0 x86_64
Solution:
Updates are available. Please see the references for more information.
Slackware Linux 12.2
-
Slackware seamonkey-2.0.14-i486-1_slack12.2.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ seamonkey-2.0.14-i486-1_slack12.2.tgz -
Slackware seamonkey-solibs-2.0.14-i486-1_slack12.2.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ seamonkey-solibs-2.0.14-i486-1_slack12.2.tgz
Slackware Linux 13.1
-
Slackware seamonkey-2.0.14-i486-1_slack13.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/ seamonkey-2.0.14-i486-1_slack13.1.txz -
Slackware seamonkey-solibs-2.0.14-i486-1_slack13.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/ seamonkey-solibs-2.0.14-i486-1_slack13.1.txz
SuSE openSUSE 11.4
-
SuSE enigmail-1.1.2-9.5.1.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/enigmail-1.1.2-9.5.1 .i586.rpm -
SuSE enigmail-1.1.2-9.5.1.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/enigmail-1.1.2-9.5 .1.x86_64.rpm -
SuSE mozilla-js192-1.9.2.17-0.2.2.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/mozilla-js192-1.9.2. 17-0.2.2.i586.rpm -
SuSE mozilla-js192-1.9.2.17-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-js192-1.9. 2.17-0.2.2.x86_64.rpm -
SuSE mozilla-js192-32bit-1.9.2.17-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-js192-32bi t-1.9.2.17-0.2.2.x86_64.rpm -
SuSE mozilla-js20-2.0.1-0.2.2.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/mozilla-js20-2.0.1-0 .2.2.i586.rpm -
SuSE mozilla-js20-2.0.1-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-js20-2.0.1 -0.2.2.x86_64.rpm -
SuSE mozilla-js20-32bit-2.0.1-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-js20-32bit -2.0.1-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner192-1.9.2.17-0.2.2.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/mozilla-xulrunner192 -1.9.2.17-0.2.2.i586.rpm -
SuSE mozilla-xulrunner192-1.9.2.17-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner1 92-1.9.2.17-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner192-32bit-1.9.2.17-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner1 92-32bit-1.9.2.17-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner192-buildsymbols-1.9.2.17-0.2.2.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/mozilla-xulrunner192 -buildsymbols-1.9.2.17-0.2.2.i586.rpm -
SuSE mozilla-xulrunner192-buildsymbols-1.9.2.17-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner1 92-buildsymbols-1.9.2.17-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner192-devel-1.9.2.17-0.2.2.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/mozilla-xulrunner192 -devel-1.9.2.17-0.2.2.i586.rpm -
SuSE mozilla-xulrunner192-devel-1.9.2.17-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner1 92-devel-1.9.2.17-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner192-gnome-1.9.2.17-0.2.2.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/mozilla-xulrunner192 -gnome-1.9.2.17-0.2.2.i586.rpm -
SuSE mozilla-xulrunner192-gnome-1.9.2.17-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner1 92-gnome-1.9.2.17-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner192-gnome-32bit-1.9.2.17-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner1 92-gnome-32bit-1.9.2.17-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner192-translations-common-1.9.2.17-0.2.2.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/mozilla-xulrunner192 -translations-common-1.9.2.17-0.2.2.i586.rpm -
SuSE mozilla-xulrunner192-translations-common-1.9.2.17-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner1 92-translations-common-1.9.2.17-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner192-translations-common-32bit-1.9.2.17-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner1 92-translations-common-32bit-1.9.2.17-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner192-translations-other-1.9.2.17-0.2.2.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/mozilla-xulrunner192 -translations-other-1.9.2.17-0.2.2.i586.rpm -
SuSE mozilla-xulrunner192-translations-other-1.9.2.17-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner1 92-translations-other-1.9.2.17-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner192-translations-other-32bit-1.9.2.17-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner1 92-translations-other-32bit-1.9.2.17-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner20-2.0.1-0.2.2.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/mozilla-xulrunner20- 2.0.1-0.2.2.i586.rpm -
SuSE mozilla-xulrunner20-2.0.1-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner2 0-2.0.1-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner20-32bit-2.0.1-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner2 0-32bit-2.0.1-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner20-buildsymbols-2.0.1-0.2.2.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/mozilla-xulrunner20- buildsymbols-2.0.1-0.2.2.i586.rpm -
SuSE mozilla-xulrunner20-buildsymbols-2.0.1-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner2 0-buildsymbols-2.0.1-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner20-devel-2.0.1-0.2.2.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/mozilla-xulrunner20- devel-2.0.1-0.2.2.i586.rpm -
SuSE mozilla-xulrunner20-devel-2.0.1-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner2 0-devel-2.0.1-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner20-gnome-2.0.1-0.2.2.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/mozilla-xulrunner20- gnome-2.0.1-0.2.2.i586.rpm -
SuSE mozilla-xulrunner20-gnome-2.0.1-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner2 0-gnome-2.0.1-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner20-gnome-32bit-2.0.1-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner2 0-gnome-32bit-2.0.1-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner20-translations-common-2.0.1-0.2.2.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/mozilla-xulrunner20- translations-common-2.0.1-0.2.2.i586.rpm -
SuSE mozilla-xulrunner20-translations-common-2.0.1-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner2 0-translations-common-2.0.1-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner20-translations-common-32bit-2.0.1-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner2 0-translations-common-32bit-2.0.1-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner20-translations-other-2.0.1-0.2.2.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/mozilla-xulrunner20- translations-other-2.0.1-0.2.2.i586.rpm -
SuSE mozilla-xulrunner20-translations-other-2.0.1-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner2 0-translations-other-2.0.1-0.2.2.x86_64.rpm -
SuSE mozilla-xulrunner20-translations-other-32bit-2.0.1-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/mozilla-xulrunner2 0-translations-other-32bit-2.0.1-0.2.2.x86_64.rpm -
SuSE MozillaFirefox-4.0.1-0.2.2.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/MozillaFirefox-4.0.1 -0.2.2.i586.rpm -
SuSE MozillaFirefox-4.0.1-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/MozillaFirefox-4.0 .1-0.2.2.x86_64.rpm -
SuSE MozillaFirefox-branding-upstream-4.0.1-0.2.2.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/MozillaFirefox-brand ing-upstream-4.0.1-0.2.2.i586.rpm -
SuSE MozillaFirefox-branding-upstream-4.0.1-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/MozillaFirefox-bra nding-upstream-4.0.1-0.2.2.x86_64.rpm -
SuSE MozillaFirefox-devel-4.0.1-0.2.2.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/MozillaFirefox-devel -4.0.1-0.2.2.i586.rpm -
SuSE MozillaFirefox-devel-4.0.1-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/MozillaFirefox-dev el-4.0.1-0.2.2.x86_64.rpm -
SuSE MozillaFirefox-translations-common-4.0.1-0.2.2.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/MozillaFirefox-trans lations-common-4.0.1-0.2.2.i586.rpm -
SuSE MozillaFirefox-translations-common-4.0.1-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/MozillaFirefox-tra nslations-common-4.0.1-0.2.2.x86_64.rpm -
SuSE MozillaFirefox-translations-other-4.0.1-0.2.2.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/MozillaFirefox-trans lations-other-4.0.1-0.2.2.i586.rpm -
SuSE MozillaFirefox-translations-other-4.0.1-0.2.2.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/MozillaFirefox-tra nslations-other-4.0.1-0.2.2.x86_64.rpm -
SuSE MozillaThunderbird-3.1.10-0.5.1.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/MozillaThunderbird-3 .1.10-0.5.1.i586.rpm -
SuSE MozillaThunderbird-3.1.10-0.5.1.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/MozillaThunderbird -3.1.10-0.5.1.x86_64.rpm -
SuSE MozillaThunderbird-buildsymbols-3.1.10-0.5.1.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/MozillaThunderbird-b uildsymbols-3.1.10-0.5.1.i586.rpm -
SuSE MozillaThunderbird-buildsymbols-3.1.10-0.5.1.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/MozillaThunderbird -buildsymbols-3.1.10-0.5.1.x86_64.rpm -
SuSE MozillaThunderbird-devel-3.1.10-0.5.1.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/MozillaThunderbird-d evel-3.1.10-0.5.1.i586.rpm -
SuSE MozillaThunderbird-devel-3.1.10-0.5.1.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/MozillaThunderbird -devel-3.1.10-0.5.1.x86_64.rpm -
SuSE MozillaThunderbird-translations-common-3.1.10-0.5.1.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/MozillaThunderbird-t ranslations-common-3.1.10-0.5.1.i586.rpm -
SuSE MozillaThunderbird-translations-common-3.1.10-0.5.1.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/MozillaThunderbird -translations-common-3.1.10-0.5.1.x86_64.rpm -
SuSE MozillaThunderbird-translations-other-3.1.10-0.5.1.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/MozillaThunderbird-t ranslations-other-3.1.10-0.5.1.i586.rpm -
SuSE MozillaThunderbird-translations-other-3.1.10-0.5.1.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/MozillaThunderbird -translations-other-3.1.10-0.5.1.x86_64.rpm -
SuSE seamonkey-2.0.14-0.2.1.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/seamonkey-2.0.14-0.2 .1.i586.rpm -
SuSE seamonkey-2.0.14-0.2.1.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/seamonkey-2.0.14-0 .2.1.x86_64.rpm -
SuSE seamonkey-dom-inspector-2.0.14-0.2.1.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/seamonkey-dom-inspec tor-2.0.14-0.2.1.i586.rpm -
SuSE seamonkey-dom-inspector-2.0.14-0.2.1.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/seamonkey-dom-insp ector-2.0.14-0.2.1.x86_64.rpm -
SuSE seamonkey-irc-2.0.14-0.2.1.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/seamonkey-irc-2.0.14 -0.2.1.i586.rpm -
SuSE seamonkey-irc-2.0.14-0.2.1.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/seamonkey-irc-2.0. 14-0.2.1.x86_64.rpm -
SuSE seamonkey-translations-common-2.0.14-0.2.1.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/seamonkey-translatio ns-common-2.0.14-0.2.1.i586.rpm -
SuSE seamonkey-translations-common-2.0.14-0.2.1.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/seamonkey-translat ions-common-2.0.14-0.2.1.x86_64.rpm -
SuSE seamonkey-translations-other-2.0.14-0.2.1.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/seamonkey-translatio ns-other-2.0.14-0.2.1.i586.rpm -
SuSE seamonkey-translations-other-2.0.14-0.2.1.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/seamonkey-translat ions-other-2.0.14-0.2.1.x86_64.rpm -
SuSE seamonkey-venkman-2.0.14-0.2.1.i586.rpm
http://download.opensuse.org/update/11.4/rpm/i586/seamonkey-venkman-2. 0.14-0.2.1.i586.rpm -
SuSE seamonkey-venkman-2.0.14-0.2.1.x86_64.rpm
http://download.opensuse.org/update/11.4/rpm/x86_64/seamonkey-venkman- 2.0.14-0.2.1.x86_64.rpm
Slackware Linux x86_64 -current
-
Slackware mozilla-firefox-4.0.1-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ xap/mozilla-firefox-4.0.1-x86_64-1.txz
Slackware Linux 13.0 x86_64
-
Slackware mozilla-firefox-3.6.17-x86_64-1_slack13.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/package s/mozilla-firefox-3.6.17-x86_64-1_slack13.0.txz -
Slackware seamonkey-2.0.14-x86_64-1_slack13.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/package s/seamonkey-2.0.14-x86_64-1_slack13.0.txz -
Slackware seamonkey-solibs-2.0.14-x86_64-1_slack13.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/package s/seamonkey-solibs-2.0.14-x86_64-1_slack13.0.txz
References
Mozilla Firefox/SeaMonkey OBJECT 'mObserverList' Use-After-Free Remote Code Execution Vulnerability
References:
References:
- Mozilla Firefox Homepage (Mozilla)
- SeaMonkey Homepage (Mozilla)
- ASA-2011-194 firefox security update (RHSA-2011-0471) (Avaya)
- Bug 634983 - (CVE-2011-0066) Use-after-free vulnerability in OBJECT's mObserverL (Mozilla)
- MDVSA-2011:079 firefox (Mandriva)
- Mozilla Firefox OBJECT mObserverList Remote Code Execution Vulnerability (Zero Day Initiative)
- Mozilla Foundation Security Advisory 2011-12 (Mozilla Foundation)