{"id":"CVE-2011-3671","aliases":["EUVD-2011-3630","GHSA-j3fg-24fx-wv59"],"status":"published","title":"Use-after-free vulnerability in the nsHTMLSelectElement function in nsHTMLSelectElement.cpp in...","description":"Use-after-free vulnerability in the nsHTMLSelectElement function in nsHTMLSelectElement.cpp in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allows remote attackers to execute arbitrary code via vectors involving removal of the parent node of an element.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0184,"percentile":0.79127,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-399"],"published":"2012-06-18T19:00:00Z","modified":"2026-06-16T23:33:44Z","products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"seamonkey"},{"vendor":"mozilla","product":"thunderbird"}],"references":[{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-41.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=739343","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3671"},{"url":"https://github.com/advisories/GHSA-j3fg-24fx-wv59"}],"sources":{"cve":[{"id":"CVE-2011-3671","description":"Use-after-free vulnerability in the nsHTMLSelectElement function in nsHTMLSelectElement.cpp in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allows remote attackers to execute arbitrary code via vectors involving removal of the parent node of an element.","status":"published","published":"2012-06-18T19:00:00Z","modified":"2024-09-16T20:12:45.339Z","updated_at":"2026-11-02T14:35:37.324501Z"}],"euvd":[{"id":"EUVD-2011-3630","description":"Use-after-free vulnerability in the nsHTMLSelectElement function in nsHTMLSelectElement.cpp in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allows remote attackers to execute arbitrary code via vectors involving removal of the parent node of an element.","status":"published","published":"2012-06-18T19:00:00Z","modified":"2024-09-16T20:12:45Z","updated_at":"2026-11-03T00:55:15.889317Z"}],"ghsa":[{"id":"GHSA-j3fg-24fx-wv59","title":"Use-after-free vulnerability in the nsHTMLSelectElement function in nsHTMLSelectElement.cpp in...","description":"Use-after-free vulnerability in the nsHTMLSelectElement function in nsHTMLSelectElement.cpp in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allows remote attackers to execute arbitrary code via vectors involving removal of the parent node of an element.","status":"published","published":"2022-05-17T05:28:32Z","modified":"2023-01-28T05:03:53Z","updated_at":"2026-11-02T14:44:04.026586Z"}],"nvd":[{"id":"CVE-2011-3671","description":"Use-after-free vulnerability in the nsHTMLSelectElement function in nsHTMLSelectElement.cpp in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allows remote attackers to execute arbitrary code via vectors involving removal of the parent node of an element.","status":"published","published":"2012-06-18T19:55:01.467Z","modified":"2026-06-16T23:33:44.31Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-399"],"updated_at":"2026-11-02T14:02:12.272092Z"}]}}