Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 on 32-bit Windows 7 platforms allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving use of the file-open dialog in a child window, related to the IUnknown_QueryService function in the Windows shlwapi.dll library.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Firefox | Mozilla | 4.0 (including) | 4.0 (including) |
| Firefox | Mozilla | 4.0-beta1 (including) | 4.0-beta1 (including) |
| Firefox | Mozilla | 4.0-beta10 (including) | 4.0-beta10 (including) |
| Firefox | Mozilla | 4.0-beta11 (including) | 4.0-beta11 (including) |
| Firefox | Mozilla | 4.0-beta12 (including) | 4.0-beta12 (including) |
| Firefox | Mozilla | 4.0-beta2 (including) | 4.0-beta2 (including) |
| Firefox | Mozilla | 4.0-beta3 (including) | 4.0-beta3 (including) |
| Firefox | Mozilla | 4.0-beta4 (including) | 4.0-beta4 (including) |
| Firefox | Mozilla | 4.0-beta5 (including) | 4.0-beta5 (including) |
| Firefox | Mozilla | 4.0-beta6 (including) | 4.0-beta6 (including) |
| Firefox | Mozilla | 4.0-beta7 (including) | 4.0-beta7 (including) |
| Firefox | Mozilla | 4.0-beta8 (including) | 4.0-beta8 (including) |
| Firefox | Mozilla | 4.0-beta9 (including) | 4.0-beta9 (including) |
| Firefox | Mozilla | 4.0.1 (including) | 4.0.1 (including) |
| Firefox | Mozilla | 5.0 (including) | 5.0 (including) |
| Firefox | Mozilla | 5.0.1 (including) | 5.0.1 (including) |
| Firefox | Mozilla | 6.0 (including) | 6.0 (including) |
| Firefox | Mozilla | 6.0.1 (including) | 6.0.1 (including) |
| Firefox | Mozilla | 6.0.2 (including) | 6.0.2 (including) |
| Firefox | Mozilla | 7.0 (including) | 7.0 (including) |
| Firefox | Mozilla | 7.0.1 (including) | 7.0.1 (including) |
| Firefox | Mozilla | 8.0 (including) | 8.0 (including) |
| Firefox | Mozilla | 8.0.1 (including) | 8.0.1 (including) |
| Firefox | Mozilla | 9.0 (including) | 9.0 (including) |
| Firefox | Mozilla | 9.0.1 (including) | 9.0.1 (including) |
| Firefox | Ubuntu | hardy | * |
| Seamonkey | Ubuntu | hardy | * |
| Thunderbird | Ubuntu | hardy | * |
| Xulrunner-1.9.2 | Ubuntu | hardy | * |
| Xulrunner-2.0 | Ubuntu | natty | * |