Security researcher regenrecht reported, via TippingPoint’s Zero Day Initiative, a use-after-free in XMLSerializer by the exposing of serializeToStream to web content. This can lead to arbitrary code execution when exploited.
CPE | Name | Operator | Version |
---|---|---|---|
firefox | lt | 18 | |
firefox esr | lt | 10.0.12 | |
firefox esr | lt | 17.0.2 | |
seamonkey | lt | 2.15 | |
thunderbird | lt | 17.0.2 | |
thunderbird esr | lt | 10.0.12 | |
thunderbird esr | lt | 17.0.2 |