CVE-2013-1685 Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0...
HighCVSS 9.3
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 21.0 | No fix listed |
| mozilla Firefox | = 19.0 | No fix listed |
| mozilla Firefox | = 19.0.1 | No fix listed |
| mozilla Firefox | = 19.0.2 | No fix listed |
| mozilla Firefox | = 20.0 | No fix listed |
| mozilla Firefox | = 20.0.1 | No fix listed |
| mozilla Firefox | = 17.0 | No fix listed |
| mozilla Firefox | = 17.0.1 | No fix listed |
| mozilla Firefox | = 17.0.2 | No fix listed |
| mozilla Firefox | = 17.0.3 | No fix listed |
| mozilla Firefox | = 17.0.4 | No fix listed |
| mozilla Firefox | = 17.0.5 | No fix listed |
| mozilla Firefox | = 17.0.6 | No fix listed |
| mozilla Thunderbird | <= 17.0.6 | No fix listed |
| mozilla Thunderbird | = 17.0 | No fix listed |
| mozilla Thunderbird | = 17.0.1 | No fix listed |
| mozilla Thunderbird | = 17.0.2 | No fix listed |
| mozilla Thunderbird | = 17.0.3 | No fix listed |
| mozilla Thunderbird | = 17.0.4 | No fix listed |
| mozilla Thunderbird | = 17.0.5 | No fix listed |
| mozilla thunderbird esr | = 17.0 | No fix listed |
| mozilla thunderbird esr | = 17.0.1 | No fix listed |
| mozilla thunderbird esr | = 17.0.2 | No fix listed |
| mozilla thunderbird esr | = 17.0.3 | No fix listed |
| mozilla thunderbird esr | = 17.0.4 | No fix listed |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla thunderbird esr | = 17.0.5 | No fix listed |
| mozilla thunderbird esr | = 17.0.6 | No fix listed |
References
- openSUSE-SU-2013:1140 vendor-advisory
- openSUSE-SU-2013:1141 vendor-advisory
- openSUSE-SU-2013:1142 vendor-advisory
- openSUSE-SU-2013:1143 vendor-advisory
- SUSE-SU-2013:1152 vendor-advisory
- SUSE-SU-2013:1153 vendor-advisory
- RHSA-2013:0981 vendor-advisory
- RHSA-2013:0982 vendor-advisory
- DSA-2716 vendor-advisory
- DSA-2720 vendor-advisory
- www.mozilla.org vendor-advisory
- 60773 vdb-entry
- USN-1890-1 vendor-advisory
- USN-1891-1 vendor-advisory
- bugzilla.mozilla.org
- oval:org.mitre.oval:def:17330 signature vdb-entry