Title: Mozilla Multiple Products nsXULCommandDispatcher.cpp Use-after-free Remote Code Execution
Info
Disclosure
Jun 21, 2011
Discovery
Unknown
Dates
Exploit
Unknown
Solution
Jun 21, 2011
Description
Classification
Location:
Local / Remote,
Context Dependent
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Private
Disclosure:
Vendor Verified,
Coordinated Disclosure
OSVDB:
Web Related
Solution
Upgrade Thunderbird to 3.1.11 or higher and Firefox to 3.6.18 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.