10

CVE-2013-5599

Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka presentation shell) implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors involving a CANVAS element, a mozTextStyle attribute, and an onresize event.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version <= 24.0
Mozilla ≫ Firefox Version 19.0
Mozilla ≫ Firefox Version 19.0.1
Mozilla ≫ Firefox Version 19.0.2
Mozilla ≫ Firefox Version 20.0
Mozilla ≫ Firefox Version 20.0.1
Mozilla ≫ Firefox Version 21.0
Mozilla ≫ Firefox Version 22.0
Mozilla ≫ Firefox Version 23.0
Mozilla ≫ Firefox Version 23.0.1
Mozilla ≫ Seamonkey Update beta2 Version <= 2.22
Mozilla ≫ Seamonkey Version 2.0
Mozilla ≫ Seamonkey Version 2.0 Update alpha_1
Mozilla ≫ Seamonkey Version 2.0 Update alpha_2
Mozilla ≫ Seamonkey Version 2.0 Update alpha_3
Mozilla ≫ Seamonkey Version 2.0 Update beta_1
Mozilla ≫ Seamonkey Version 2.0 Update beta_2
Mozilla ≫ Seamonkey Version 2.0 Update rc1
Mozilla ≫ Seamonkey Version 2.0 Update rc2
Mozilla ≫ Seamonkey Version 2.0.1
Mozilla ≫ Seamonkey Version 2.0.2
Mozilla ≫ Seamonkey Version 2.0.3
Mozilla ≫ Seamonkey Version 2.0.4
Mozilla ≫ Seamonkey Version 2.0.5
Mozilla ≫ Seamonkey Version 2.0.6
Mozilla ≫ Seamonkey Version 2.0.7
Mozilla ≫ Seamonkey Version 2.0.8
Mozilla ≫ Seamonkey Version 2.0.9
Mozilla ≫ Seamonkey Version 2.0.10
Mozilla ≫ Seamonkey Version 2.0.11
Mozilla ≫ Seamonkey Version 2.0.12
Mozilla ≫ Seamonkey Version 2.0.13
Mozilla ≫ Seamonkey Version 2.0.14
Mozilla ≫ Seamonkey Version 2.1
Mozilla ≫ Seamonkey Version 2.1 Update alpha1
Mozilla ≫ Seamonkey Version 2.1 Update alpha2
Mozilla ≫ Seamonkey Version 2.1 Update alpha3
Mozilla ≫ Seamonkey Version 2.1 Update beta1
Mozilla ≫ Seamonkey Version 2.1 Update beta2
Mozilla ≫ Seamonkey Version 2.1 Update beta3
Mozilla ≫ Seamonkey Version 2.1 Update rc1
Mozilla ≫ Seamonkey Version 2.1 Update rc2
Mozilla ≫ Seamonkey Version 2.10
Mozilla ≫ Seamonkey Version 2.10 Update beta1
Mozilla ≫ Seamonkey Version 2.10 Update beta2
Mozilla ≫ Seamonkey Version 2.10 Update beta3
Mozilla ≫ Seamonkey Version 2.10.1
Mozilla ≫ Seamonkey Version 2.11
Mozilla ≫ Seamonkey Version 2.11 Update beta1
Mozilla ≫ Seamonkey Version 2.11 Update beta2
Mozilla ≫ Seamonkey Version 2.11 Update beta3
Mozilla ≫ Seamonkey Version 2.11 Update beta4
Mozilla ≫ Seamonkey Version 2.11 Update beta5
Mozilla ≫ Seamonkey Version 2.11 Update beta6
Mozilla ≫ Seamonkey Version 2.12
Mozilla ≫ Seamonkey Version 2.12 Update beta1
Mozilla ≫ Seamonkey Version 2.12 Update beta2
Mozilla ≫ Seamonkey Version 2.12 Update beta3
Mozilla ≫ Seamonkey Version 2.12 Update beta4
Mozilla ≫ Seamonkey Version 2.12 Update beta5
Mozilla ≫ Seamonkey Version 2.12 Update beta6
Mozilla ≫ Seamonkey Version 2.12.1
Mozilla ≫ Seamonkey Version 2.13
Mozilla ≫ Seamonkey Version 2.13 Update beta1
Mozilla ≫ Seamonkey Version 2.13 Update beta2
Mozilla ≫ Seamonkey Version 2.13 Update beta3
Mozilla ≫ Seamonkey Version 2.13 Update beta4
Mozilla ≫ Seamonkey Version 2.13 Update beta5
Mozilla ≫ Seamonkey Version 2.13 Update beta6
Mozilla ≫ Seamonkey Version 2.13.1
Mozilla ≫ Seamonkey Version 2.13.2
Mozilla ≫ Seamonkey Version 2.14
Mozilla ≫ Seamonkey Version 2.14 Update beta1
Mozilla ≫ Seamonkey Version 2.14 Update beta2
Mozilla ≫ Seamonkey Version 2.14 Update beta3
Mozilla ≫ Seamonkey Version 2.14 Update beta4
Mozilla ≫ Seamonkey Version 2.14 Update beta5
Mozilla ≫ Seamonkey Version 2.15
Mozilla ≫ Seamonkey Version 2.15 Update beta1
Mozilla ≫ Seamonkey Version 2.15 Update beta2
Mozilla ≫ Seamonkey Version 2.15 Update beta3
Mozilla ≫ Seamonkey Version 2.15 Update beta4
Mozilla ≫ Seamonkey Version 2.15 Update beta5
Mozilla ≫ Seamonkey Version 2.15 Update beta6
Mozilla ≫ Seamonkey Version 2.15.1
Mozilla ≫ Seamonkey Version 2.15.2
Mozilla ≫ Seamonkey Version 2.16
Mozilla ≫ Seamonkey Version 2.16 Update beta1
Mozilla ≫ Seamonkey Version 2.16 Update beta2
Mozilla ≫ Seamonkey Version 2.16 Update beta3
Mozilla ≫ Seamonkey Version 2.16 Update beta4
Mozilla ≫ Seamonkey Version 2.16 Update beta5
Mozilla ≫ Seamonkey Version 2.16.1
Mozilla ≫ Seamonkey Version 2.16.2
Mozilla ≫ Seamonkey Version 2.17
Mozilla ≫ Seamonkey Version 2.17 Update beta1
Mozilla ≫ Seamonkey Version 2.17 Update beta2
Mozilla ≫ Seamonkey Version 2.17 Update beta3
Mozilla ≫ Seamonkey Version 2.17 Update beta4
Mozilla ≫ Seamonkey Version 2.17.1
Mozilla ≫ Seamonkey Version 2.18 Update beta1
Mozilla ≫ Seamonkey Version 2.18 Update beta2
Mozilla ≫ Seamonkey Version 2.18 Update beta3
Mozilla ≫ Seamonkey Version 2.18 Update beta4
Mozilla ≫ Seamonkey Version 2.19
Mozilla ≫ Seamonkey Version 2.19 Update beta1
Mozilla ≫ Seamonkey Version 2.19 Update beta2
Mozilla ≫ Seamonkey Version 2.20
Mozilla ≫ Seamonkey Version 2.20 Update beta1
Mozilla ≫ Seamonkey Version 2.20 Update beta2
Mozilla ≫ Seamonkey Version 2.20 Update beta3
Mozilla ≫ Seamonkey Version 2.21 Update beta1
Mozilla ≫ Seamonkey Version 2.21 Update beta2
Mozilla ≫ Seamonkey Version 2.22 Update beta1
Mozilla ≫ Thunderbird Esr Version 17.0
Mozilla ≫ Thunderbird Esr Version 17.0.1
Mozilla ≫ Thunderbird Esr Version 17.0.2
Mozilla ≫ Thunderbird Esr Version 17.0.3
Mozilla ≫ Thunderbird Esr Version 17.0.4
Mozilla ≫ Thunderbird Esr Version 17.0.5
Mozilla ≫ Thunderbird Esr Version 17.0.6
Mozilla ≫ Thunderbird Esr Version 17.0.7
Mozilla ≫ Thunderbird Esr Version 17.0.8
Mozilla ≫ Thunderbird Esr Version 17.0.9
Mozilla ≫ Thunderbird Version <= 24.0.1
Mozilla ≫ Thunderbird Version 17.0
Mozilla ≫ Thunderbird Version 17.0.1
Mozilla ≫ Thunderbird Version 17.0.2
Mozilla ≫ Thunderbird Version 17.0.3
Mozilla ≫ Thunderbird Version 17.0.4
Mozilla ≫ Thunderbird Version 17.0.5
Mozilla ≫ Thunderbird Version 17.0.6
Mozilla ≫ Thunderbird Version 17.0.7
Mozilla ≫ Thunderbird Version 17.0.8
Mozilla ≫ Thunderbird Version 24.0
Mozilla ≫ Thunderbird Esr Version 17.0.9
Mozilla ≫ Firefox Version 17.0
Mozilla ≫ Firefox Version 17.0.1
Mozilla ≫ Firefox Version 17.0.2
Mozilla ≫ Firefox Version 17.0.3
Mozilla ≫ Firefox Version 17.0.4
Mozilla ≫ Firefox Version 17.0.5
Mozilla ≫ Firefox Version 17.0.6
Mozilla ≫ Firefox Version 17.0.7
Mozilla ≫ Firefox Version 17.0.8
Mozilla ≫ Firefox Version 17.0.9
Mozilla ≫ Firefox Version 24.0
Mozilla ≫ Firefox Version 24.0.1
Mozilla ≫ Firefox Version 24.0.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.19% 0.914
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://security.gentoo.org/glsa/201504-01
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html
http://rhn.redhat.com/errata/RHSA-2013-1476.html
http://rhn.redhat.com/errata/RHSA-2013-1480.html
http://www.debian.org/security/2013/dsa-2788
http://www.debian.org/security/2013/dsa-2797
http://www.mozilla.org/security/announce/2013/mfsa2013-100.html
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=915210
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19315