| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | = 38.0= 38.0.1= 38.0.5= 38.1.0= 38.1.1= 38.2.0= 38.2.1= 38.3.0= 38.4.0= 38.5.0= 38.5.1= 38.6.0= 38.6.1≤ 44.0.2 | |
| thunderbird | ≤ 38.6.0 |
The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference and memory corruption) via a crafted NPAPI plugin.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free