[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2013-5618Date: (C)2013-12-11   (M)2024-03-27


Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code by triggering improper garbage collection.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 9.8CVSS Score : 10.0
Exploit Score: 3.9Exploit Score: 10.0
Impact Score: 5.9Impact Score: 10.0
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: NETWORKAccess Vector: NETWORK
Attack Complexity: LOWAccess Complexity: LOW
Privileges Required: NONEAuthentication: NONE
User Interaction: NONEConfidentiality: COMPLETE
Scope: UNCHANGEDIntegrity: COMPLETE
Confidentiality: HIGHAvailability: COMPLETE
Integrity: HIGH 
Availability: HIGH 
  
Reference:
SECTRACK-1029470
SECTRACK-1029476
FEDORA-2013-23127
FEDORA-2013-23291
FEDORA-2013-23295
FEDORA-2013-23519
GLSA-201504-01
IAVM:2013-A-0233
RHSA-2013:1812
SUSE-SU-2013:1919
USN-2052-1
USN-2053-1
http://www.mozilla.org/security/announce/2013/mfsa2013-109.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
https://bugzilla.mozilla.org/show_bug.cgi?id=926361
openSUSE-SU-2013:1916
openSUSE-SU-2013:1917
openSUSE-SU-2013:1918
openSUSE-SU-2013:1957
openSUSE-SU-2013:1958
openSUSE-SU-2013:1959
openSUSE-SU-2014:0008

CPE    509
cpe:/a:mozilla:firefox:14.0
cpe:/a:mozilla:firefox:20.0.1
cpe:/a:mozilla:firefox:3.6.26
cpe:/a:mozilla:firefox:3.6.27
...
CWE    1
CWE-399
OVAL    15
oval:org.secpod.oval:def:16259
oval:org.secpod.oval:def:1500332
oval:org.secpod.oval:def:1500338
oval:org.secpod.oval:def:1500337
...

© SecPod Technologies