Mozilla Firefox / Thunderbird / SeaMonkey XBL Binding Use-After-Free Vulnerability

SA48008

CVE-2012-0452

13 Feb 2012

Highly Critical

Vendor Patch

Mozilla Firefox 10.x
Mozilla SeaMonkey 2.x
Mozilla Thunderbird 10.x

From remote

System access

This covers vulnerabilities where malicious people are able to gain system access and execute arbitrary code with the privileges of a local user.

A vulnerability has been reported in multiple Mozilla products, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a use-after-free error in the "nsXBLDocumentInfo::ReadPrototypeBindings()" method when handling XBL bindings in a hash table and can be exploited to cause a cycle collector to call an invalid virtual function.

Successful exploitation may allow execution of arbitrary code.

Update Firefox and Thunderbird to version 10.0.1 and SeaMonkey to version 2.7.1

The vendor credits Andrew McCreight and Olli Pettay, Mozilla developers.

http://www.mozilla.org/security/announce/2012/mfsa2012-10.html