9.3

CVE-2013-1738

Use-after-free vulnerability in the JS_GetGlobalForScopeChain function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code by leveraging incorrect garbage collection in situations involving default compartments and frame-chain restoration.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Seamonkey Version <= 2.20
Mozilla ≫ Seamonkey Version2.0
Mozilla ≫ Seamonkey Version2.0 Updatealpha_1
Mozilla ≫ Seamonkey Version2.0 Updatealpha_2
Mozilla ≫ Seamonkey Version2.0 Updatealpha_3
Mozilla ≫ Seamonkey Version2.0 Updatebeta_1
Mozilla ≫ Seamonkey Version2.0 Updatebeta_2
Mozilla ≫ Seamonkey Version2.0 Updaterc1
Mozilla ≫ Seamonkey Version2.0 Updaterc2
Mozilla ≫ Seamonkey Version2.0.1
Mozilla ≫ Seamonkey Version2.0.2
Mozilla ≫ Seamonkey Version2.0.3
Mozilla ≫ Seamonkey Version2.0.4
Mozilla ≫ Seamonkey Version2.0.5
Mozilla ≫ Seamonkey Version2.0.6
Mozilla ≫ Seamonkey Version2.0.7
Mozilla ≫ Seamonkey Version2.0.8
Mozilla ≫ Seamonkey Version2.0.9
Mozilla ≫ Seamonkey Version2.0.10
Mozilla ≫ Seamonkey Version2.0.11
Mozilla ≫ Seamonkey Version2.0.12
Mozilla ≫ Seamonkey Version2.0.13
Mozilla ≫ Seamonkey Version2.0.14
Mozilla ≫ Seamonkey Version2.1
Mozilla ≫ Seamonkey Version2.1 Updatealpha1
Mozilla ≫ Seamonkey Version2.1 Updatealpha2
Mozilla ≫ Seamonkey Version2.1 Updatealpha3
Mozilla ≫ Seamonkey Version2.1 Updatebeta1
Mozilla ≫ Seamonkey Version2.1 Updatebeta2
Mozilla ≫ Seamonkey Version2.1 Updatebeta3
Mozilla ≫ Seamonkey Version2.1 Updaterc1
Mozilla ≫ Seamonkey Version2.1 Updaterc2
Mozilla ≫ Seamonkey Version2.10
Mozilla ≫ Seamonkey Version2.10 Updatebeta1
Mozilla ≫ Seamonkey Version2.10 Updatebeta2
Mozilla ≫ Seamonkey Version2.10 Updatebeta3
Mozilla ≫ Seamonkey Version2.10.1
Mozilla ≫ Seamonkey Version2.11
Mozilla ≫ Seamonkey Version2.11 Updatebeta1
Mozilla ≫ Seamonkey Version2.11 Updatebeta2
Mozilla ≫ Seamonkey Version2.11 Updatebeta3
Mozilla ≫ Seamonkey Version2.11 Updatebeta4
Mozilla ≫ Seamonkey Version2.11 Updatebeta5
Mozilla ≫ Seamonkey Version2.11 Updatebeta6
Mozilla ≫ Seamonkey Version2.12
Mozilla ≫ Seamonkey Version2.12 Updatebeta1
Mozilla ≫ Seamonkey Version2.12 Updatebeta2
Mozilla ≫ Seamonkey Version2.12 Updatebeta3
Mozilla ≫ Seamonkey Version2.12 Updatebeta4
Mozilla ≫ Seamonkey Version2.12 Updatebeta5
Mozilla ≫ Seamonkey Version2.12 Updatebeta6
Mozilla ≫ Seamonkey Version2.12.1
Mozilla ≫ Seamonkey Version2.13
Mozilla ≫ Seamonkey Version2.13 Updatebeta1
Mozilla ≫ Seamonkey Version2.13 Updatebeta2
Mozilla ≫ Seamonkey Version2.13 Updatebeta3
Mozilla ≫ Seamonkey Version2.13 Updatebeta4
Mozilla ≫ Seamonkey Version2.13 Updatebeta5
Mozilla ≫ Seamonkey Version2.13 Updatebeta6
Mozilla ≫ Seamonkey Version2.13.1
Mozilla ≫ Seamonkey Version2.13.2
Mozilla ≫ Seamonkey Version2.14
Mozilla ≫ Seamonkey Version2.14 Updatebeta1
Mozilla ≫ Seamonkey Version2.14 Updatebeta2
Mozilla ≫ Seamonkey Version2.14 Updatebeta3
Mozilla ≫ Seamonkey Version2.14 Updatebeta4
Mozilla ≫ Seamonkey Version2.14 Updatebeta5
Mozilla ≫ Seamonkey Version2.15
Mozilla ≫ Seamonkey Version2.15 Updatebeta1
Mozilla ≫ Seamonkey Version2.15 Updatebeta2
Mozilla ≫ Seamonkey Version2.15 Updatebeta3
Mozilla ≫ Seamonkey Version2.15 Updatebeta4
Mozilla ≫ Seamonkey Version2.15 Updatebeta5
Mozilla ≫ Seamonkey Version2.15 Updatebeta6
Mozilla ≫ Seamonkey Version2.15.1
Mozilla ≫ Seamonkey Version2.15.2
Mozilla ≫ Seamonkey Version2.16
Mozilla ≫ Seamonkey Version2.16 Updatebeta1
Mozilla ≫ Seamonkey Version2.16 Updatebeta2
Mozilla ≫ Seamonkey Version2.16 Updatebeta3
Mozilla ≫ Seamonkey Version2.16 Updatebeta4
Mozilla ≫ Seamonkey Version2.16 Updatebeta5
Mozilla ≫ Seamonkey Version2.16.1
Mozilla ≫ Seamonkey Version2.16.2
Mozilla ≫ Seamonkey Version2.17
Mozilla ≫ Seamonkey Version2.17 Updatebeta1
Mozilla ≫ Seamonkey Version2.17 Updatebeta2
Mozilla ≫ Seamonkey Version2.17 Updatebeta3
Mozilla ≫ Seamonkey Version2.17 Updatebeta4
Mozilla ≫ Seamonkey Version2.17.1
Mozilla ≫ Seamonkey Version2.18 Updatebeta1
Mozilla ≫ Seamonkey Version2.18 Updatebeta2
Mozilla ≫ Seamonkey Version2.18 Updatebeta3
Mozilla ≫ Seamonkey Version2.18 Updatebeta4
Mozilla ≫ Seamonkey Version2.19
Mozilla ≫ Seamonkey Version2.19 Updatebeta1
Mozilla ≫ Seamonkey Version2.19 Updatebeta2
Mozilla ≫ Seamonkey Version2.20 Updatebeta1
Mozilla ≫ Seamonkey Version2.20 Updatebeta2
Mozilla ≫ Seamonkey Version2.20 Updatebeta3
Mozilla ≫ Thunderbird Version <= 17.0.9
Mozilla ≫ Thunderbird Version17.0
Mozilla ≫ Thunderbird Version17.0.1
Mozilla ≫ Thunderbird Version17.0.2
Mozilla ≫ Thunderbird Version17.0.3
Mozilla ≫ Thunderbird Version17.0.4
Mozilla ≫ Thunderbird Version17.0.5
Mozilla ≫ Thunderbird Version17.0.6
Mozilla ≫ Thunderbird Version17.0.7
Mozilla ≫ Thunderbird Version17.0.8
Mozilla ≫ Firefox Version <= 23.0.1
Mozilla ≫ Firefox Version19.0
Mozilla ≫ Firefox Version19.0.1
Mozilla ≫ Firefox Version19.0.2
Mozilla ≫ Firefox Version20.0
Mozilla ≫ Firefox Version20.0.1
Mozilla ≫ Firefox Version21.0
Mozilla ≫ Firefox Version22.0
Mozilla ≫ Firefox Version23.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.91% 0.923
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html
http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html
http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html
http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html
http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html
http://www.ubuntu.com/usn/USN-1951-1
http://www.ubuntu.com/usn/USN-1952-1
http://www.mozilla.org/security/announce/2013/mfsa2013-92.html
Vendor Advisory
http://www.securityfocus.com/bid/62466
https://bugzilla.mozilla.org/show_bug.cgi?id=882897
https://bugzilla.mozilla.org/show_bug.cgi?id=887334
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18766