[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2013-0745Date: (C)2013-01-13   (M)2024-03-27


The AutoWrapperChanger class in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not properly interact with garbage collection, which allows remote attackers to execute arbitrary code via a crafted HTML document referencing JavaScript objects.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 9.3
Exploit Score: 8.6
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
IAVM:2013-A-0009
SUSE-SU-2013:0048
SUSE-SU-2013:0049
USN-1681-1
USN-1681-2
USN-1681-4
http://www.mozilla.org/security/announce/2013/mfsa2013-08.html
https://bugzilla.mozilla.org/show_bug.cgi?id=794158
openSUSE-SU-2013:0131
openSUSE-SU-2013:0149
oval:org.mitre.oval:def:17061

CPE    456
cpe:/a:mozilla:firefox:14.0
cpe:/a:mozilla:seamonkey:2.8:beta6
cpe:/a:mozilla:firefox:3.6.20
cpe:/a:mozilla:firefox:3.6.21
...
CWE    1
CWE-399
OVAL    8
oval:org.secpod.oval:def:9644
oval:org.secpod.oval:def:9661
oval:org.secpod.oval:def:400462
oval:org.secpod.oval:def:400466
...

© SecPod Technologies