CVE-2011-3659

Mozilla Firefox <4.10 - Use After Free

Title source: llm

Exploitation Summary

EIP tracks 2 public exploits for CVE-2011-3659. PoCs published by Metasploit, regenrecht, including Metasploit module exploits/windows/browser/mozilla_attribchildremoved.

AI-analyzed exploit summary This Metasploit module exploits a use-after-free vulnerability in Firefox 8/9 via the AttributeChildRemoved() function, allowing arbitrary code execution through careful memory manipulation and ROP chains.

Description

Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vectors related to incorrect AttributeChildRemoved notifications that affect access to removed nsDOMAttribute child nodes.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/18870

View Code ZIP pw:eip

This Metasploit module exploits a use-after-free vulnerability in Firefox 8/9 via the AttributeChildRemoved() function, allowing arbitrary code execution through careful memory manipulation and ROP chains.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Complex

Reliability

Reliable

Target: Mozilla Firefox 8/8.0.1, 9/9.0.1

No auth needed

Prerequisites: Target must be using a vulnerable version of Firefox on Windows XP

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

metasploit WORKING POC NORMAL

by regenrecht · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_attribchildremoved.rb