CVE

Id
60692  
CVE No.
CVE-2013-0745  
Status
Candidate  
Description
The AutoWrapperChanger class in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not properly interact with garbage collection, which allows remote attackers to execute arbitrary code via a crafted HTML document referencing JavaScript objects.  
Phase
Assigned (20130102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
611113 60692 CVE-2013-0745 CONFIRM:http://www.mozilla.org/security/announce/2013/mfsa2013-08.html  View
611114 60692 CVE-2013-0745 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=794158  View
611115 60692 CVE-2013-0745 SUSE:SUSE-SU-2013:0048  View
611116 60692 CVE-2013-0745 URL:http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html  View
611117 60692 CVE-2013-0745 SUSE:SUSE-SU-2013:0049  View
611118 60692 CVE-2013-0745 URL:http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html  View
611119 60692 CVE-2013-0745 SUSE:openSUSE-SU-2013:0131  View
611120 60692 CVE-2013-0745 URL:http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html  View
611121 60692 CVE-2013-0745 SUSE:openSUSE-SU-2013:0149  View
611122 60692 CVE-2013-0745 URL:http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html  View
611123 60692 CVE-2013-0745 UBUNTU:USN-1681-1  View
611124 60692 CVE-2013-0745 URL:http://www.ubuntu.com/usn/USN-1681-1  View
611125 60692 CVE-2013-0745 UBUNTU:USN-1681-2  View
611126 60692 CVE-2013-0745 URL:http://www.ubuntu.com/usn/USN-1681-2  View
611127 60692 CVE-2013-0745 UBUNTU:USN-1681-4  View
611128 60692 CVE-2013-0745 URL:http://www.ubuntu.com/usn/USN-1681-4  View
611129 60692 CVE-2013-0745 OVAL:oval:org.mitre.oval:def:17061  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
19492 JVNDB-2013-001066 複数の Mozilla 製品の JavaScript の実装における整数オーバーフローの脆弱性 複数の Mozilla 製品の JavaScript の実装には、整数オーバーフローの脆弱性が存在します。 CVE-2013-0750 60692 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001066.html  View