9.3

CVE-2013-1674

Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code via vectors involving an onresize event during the playing of a video.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version <= 20.0.1
Mozilla ≫ Firefox Version19.0
Mozilla ≫ Firefox Version19.0.1
Mozilla ≫ Firefox Version19.0.2
Mozilla ≫ Firefox Version20.0
Mozilla ≫ Firefox Version17.0
Mozilla ≫ Firefox Version17.0.1
Mozilla ≫ Firefox Version17.0.2
Mozilla ≫ Firefox Version17.0.3
Mozilla ≫ Firefox Version17.0.4
Mozilla ≫ Firefox Version17.0.5
Mozilla ≫ Thunderbird Version <= 17.0.5
Mozilla ≫ Thunderbird Version17.0
Mozilla ≫ Thunderbird Version17.0.1
Mozilla ≫ Thunderbird Version17.0.2
Mozilla ≫ Thunderbird Version17.0.3
Mozilla ≫ Thunderbird Version17.0.4
Mozilla ≫ Thunderbird Esr Version17.0
Mozilla ≫ Thunderbird Esr Version17.0.1
Mozilla ≫ Thunderbird Esr Version17.0.2
Mozilla ≫ Thunderbird Esr Version17.0.3
Mozilla ≫ Thunderbird Esr Version17.0.4
Mozilla ≫ Thunderbird Esr Version17.0.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.83% 0.922
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.debian.org/security/2013/dsa-2699
http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html
http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html
http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html
http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html
http://rhn.redhat.com/errata/RHSA-2013-0820.html
http://rhn.redhat.com/errata/RHSA-2013-0821.html
http://www.mandriva.com/security/advisories?name=MDVSA-2013:165
http://www.ubuntu.com/usn/USN-1822-1
http://www.ubuntu.com/usn/USN-1823-1
http://www.mozilla.org/security/announce/2013/mfsa2013-46.html
Vendor Advisory
http://www.securityfocus.com/bid/59859
https://bugzilla.mozilla.org/show_bug.cgi?id=860971
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17147