| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | = 24.0= 24.0.1= 24.0.2= 24.1.0= 24.1.1≤ 29.0.1 | |
| firefox esr | = 24.2= 24.3= 24.4= 24.5 | |
| thunderbird | = 24.0= 24.0.1= 24.1= 24.1.1= 24.2= 24.3= 24.4≤ 24.5 |
Use-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free