| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | = 24.0= 24.0.1= 24.0.2= 24.1.0= 24.1.1≤ 30.0 | |
| firefox esr | = 24.2= 24.3= 24.4= 24.5= 24.6 | |
| thunderbird | = 24.0= 24.0.1= 24.1= 24.1.1= 24.2= 24.3= 24.4= 24.5≤ 24.6 |
Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allows remote attackers to execute arbitrary code via vectors that trigger a FireOnStateChange event.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free