9.3

CVE-2013-1735

Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code via vectors related to image-document scrolling.

Data is provided by the National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version <= 23.0.1
Mozilla ≫ Firefox Version19.0
Mozilla ≫ Firefox Version19.0.1
Mozilla ≫ Firefox Version19.0.2
Mozilla ≫ Firefox Version20.0
Mozilla ≫ Firefox Version20.0.1
Mozilla ≫ Firefox Version21.0
Mozilla ≫ Firefox Version22.0
Mozilla ≫ Firefox Version23.0
Mozilla ≫ Firefox Version17.0
Mozilla ≫ Firefox Version17.0.1
Mozilla ≫ Firefox Version17.0.2
Mozilla ≫ Firefox Version17.0.3
Mozilla ≫ Firefox Version17.0.4
Mozilla ≫ Firefox Version17.0.5
Mozilla ≫ Firefox Version17.0.6
Mozilla ≫ Firefox Version17.0.7
Mozilla ≫ Firefox Version17.0.8
Mozilla ≫ Thunderbird Esr Version17.0
Mozilla ≫ Thunderbird Esr Version17.0.1
Mozilla ≫ Thunderbird Esr Version17.0.2
Mozilla ≫ Thunderbird Esr Version17.0.3
Mozilla ≫ Thunderbird Esr Version17.0.4
Mozilla ≫ Thunderbird Esr Version17.0.5
Mozilla ≫ Thunderbird Esr Version17.0.6
Mozilla ≫ Thunderbird Esr Version17.0.7
Mozilla ≫ Thunderbird Esr Version17.0.8
Mozilla ≫ Seamonkey Version <= 2.20
Mozilla ≫ Seamonkey Version2.0
Mozilla ≫ Seamonkey Version2.0 Updatealpha_1
Mozilla ≫ Seamonkey Version2.0 Updatealpha_2
Mozilla ≫ Seamonkey Version2.0 Updatealpha_3
Mozilla ≫ Seamonkey Version2.0 Updatebeta_1
Mozilla ≫ Seamonkey Version2.0 Updatebeta_2
Mozilla ≫ Seamonkey Version2.0 Updaterc1
Mozilla ≫ Seamonkey Version2.0 Updaterc2
Mozilla ≫ Seamonkey Version2.0.1
Mozilla ≫ Seamonkey Version2.0.2
Mozilla ≫ Seamonkey Version2.0.3
Mozilla ≫ Seamonkey Version2.0.4
Mozilla ≫ Seamonkey Version2.0.5
Mozilla ≫ Seamonkey Version2.0.6
Mozilla ≫ Seamonkey Version2.0.7
Mozilla ≫ Seamonkey Version2.0.8
Mozilla ≫ Seamonkey Version2.0.9
Mozilla ≫ Seamonkey Version2.0.10
Mozilla ≫ Seamonkey Version2.0.11
Mozilla ≫ Seamonkey Version2.0.12
Mozilla ≫ Seamonkey Version2.0.13
Mozilla ≫ Seamonkey Version2.0.14
Mozilla ≫ Seamonkey Version2.1
Mozilla ≫ Seamonkey Version2.1 Updatealpha1
Mozilla ≫ Seamonkey Version2.1 Updatealpha2
Mozilla ≫ Seamonkey Version2.1 Updatealpha3
Mozilla ≫ Seamonkey Version2.1 Updatebeta1
Mozilla ≫ Seamonkey Version2.1 Updatebeta2
Mozilla ≫ Seamonkey Version2.1 Updatebeta3
Mozilla ≫ Seamonkey Version2.1 Updaterc1
Mozilla ≫ Seamonkey Version2.1 Updaterc2
Mozilla ≫ Seamonkey Version2.10
Mozilla ≫ Seamonkey Version2.10 Updatebeta1
Mozilla ≫ Seamonkey Version2.10 Updatebeta2
Mozilla ≫ Seamonkey Version2.10 Updatebeta3
Mozilla ≫ Seamonkey Version2.10.1
Mozilla ≫ Seamonkey Version2.11
Mozilla ≫ Seamonkey Version2.11 Updatebeta1
Mozilla ≫ Seamonkey Version2.11 Updatebeta2
Mozilla ≫ Seamonkey Version2.11 Updatebeta3
Mozilla ≫ Seamonkey Version2.11 Updatebeta4
Mozilla ≫ Seamonkey Version2.11 Updatebeta5
Mozilla ≫ Seamonkey Version2.11 Updatebeta6
Mozilla ≫ Seamonkey Version2.12
Mozilla ≫ Seamonkey Version2.12 Updatebeta1
Mozilla ≫ Seamonkey Version2.12 Updatebeta2
Mozilla ≫ Seamonkey Version2.12 Updatebeta3
Mozilla ≫ Seamonkey Version2.12 Updatebeta4
Mozilla ≫ Seamonkey Version2.12 Updatebeta5
Mozilla ≫ Seamonkey Version2.12 Updatebeta6
Mozilla ≫ Seamonkey Version2.12.1
Mozilla ≫ Seamonkey Version2.13
Mozilla ≫ Seamonkey Version2.13 Updatebeta1
Mozilla ≫ Seamonkey Version2.13 Updatebeta2
Mozilla ≫ Seamonkey Version2.13 Updatebeta3
Mozilla ≫ Seamonkey Version2.13 Updatebeta4
Mozilla ≫ Seamonkey Version2.13 Updatebeta5
Mozilla ≫ Seamonkey Version2.13 Updatebeta6
Mozilla ≫ Seamonkey Version2.13.1
Mozilla ≫ Seamonkey Version2.13.2
Mozilla ≫ Seamonkey Version2.14
Mozilla ≫ Seamonkey Version2.14 Updatebeta1
Mozilla ≫ Seamonkey Version2.14 Updatebeta2
Mozilla ≫ Seamonkey Version2.14 Updatebeta3
Mozilla ≫ Seamonkey Version2.14 Updatebeta4
Mozilla ≫ Seamonkey Version2.14 Updatebeta5
Mozilla ≫ Seamonkey Version2.15
Mozilla ≫ Seamonkey Version2.15 Updatebeta1
Mozilla ≫ Seamonkey Version2.15 Updatebeta2
Mozilla ≫ Seamonkey Version2.15 Updatebeta3
Mozilla ≫ Seamonkey Version2.15 Updatebeta4
Mozilla ≫ Seamonkey Version2.15 Updatebeta5
Mozilla ≫ Seamonkey Version2.15 Updatebeta6
Mozilla ≫ Seamonkey Version2.15.1
Mozilla ≫ Seamonkey Version2.15.2
Mozilla ≫ Seamonkey Version2.16
Mozilla ≫ Seamonkey Version2.16 Updatebeta1
Mozilla ≫ Seamonkey Version2.16 Updatebeta2
Mozilla ≫ Seamonkey Version2.16 Updatebeta3
Mozilla ≫ Seamonkey Version2.16 Updatebeta4
Mozilla ≫ Seamonkey Version2.16 Updatebeta5
Mozilla ≫ Seamonkey Version2.16.1
Mozilla ≫ Seamonkey Version2.16.2
Mozilla ≫ Seamonkey Version2.17
Mozilla ≫ Seamonkey Version2.17 Updatebeta1
Mozilla ≫ Seamonkey Version2.17 Updatebeta2
Mozilla ≫ Seamonkey Version2.17 Updatebeta3
Mozilla ≫ Seamonkey Version2.17 Updatebeta4
Mozilla ≫ Seamonkey Version2.17.1
Mozilla ≫ Seamonkey Version2.18 Updatebeta1
Mozilla ≫ Seamonkey Version2.18 Updatebeta2
Mozilla ≫ Seamonkey Version2.18 Updatebeta3
Mozilla ≫ Seamonkey Version2.18 Updatebeta4
Mozilla ≫ Seamonkey Version2.19
Mozilla ≫ Seamonkey Version2.19 Updatebeta1
Mozilla ≫ Seamonkey Version2.19 Updatebeta2
Mozilla ≫ Seamonkey Version2.20 Updatebeta1
Mozilla ≫ Seamonkey Version2.20 Updatebeta2
Mozilla ≫ Seamonkey Version2.20 Updatebeta3
Mozilla ≫ Thunderbird Version <= 17.0.9
Mozilla ≫ Thunderbird Version17.0
Mozilla ≫ Thunderbird Version17.0.1
Mozilla ≫ Thunderbird Version17.0.2
Mozilla ≫ Thunderbird Version17.0.3
Mozilla ≫ Thunderbird Version17.0.4
Mozilla ≫ Thunderbird Version17.0.5
Mozilla ≫ Thunderbird Version17.0.6
Mozilla ≫ Thunderbird Version17.0.7
Mozilla ≫ Thunderbird Version17.0.8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 4.5% 0.887
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.