CVE

Id
60693  
CVE No.
CVE-2013-0746  
Status
Candidate  
Description
Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 do not properly implement quickstubs that use the jsval data type for their return values, which allows remote attackers to execute arbitrary code or cause a denial of service (compartment mismatch and application crash) via crafted JavaScript code that is not properly handled during garbage collection.  
Phase
Assigned (20130102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
611130 60693 CVE-2013-0746 CONFIRM:http://www.mozilla.org/security/announce/2013/mfsa2013-09.html  View
611131 60693 CVE-2013-0746 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=816842  View
611132 60693 CVE-2013-0746 REDHAT:RHSA-2013:0144  View
611133 60693 CVE-2013-0746 URL:http://rhn.redhat.com/errata/RHSA-2013-0144.html  View
611134 60693 CVE-2013-0746 REDHAT:RHSA-2013:0145  View
611135 60693 CVE-2013-0746 URL:http://rhn.redhat.com/errata/RHSA-2013-0145.html  View
611136 60693 CVE-2013-0746 SUSE:SUSE-SU-2013:0048  View
611137 60693 CVE-2013-0746 URL:http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html  View
611138 60693 CVE-2013-0746 SUSE:SUSE-SU-2013:0049  View
611139 60693 CVE-2013-0746 URL:http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html  View
611140 60693 CVE-2013-0746 SUSE:openSUSE-SU-2013:0131  View
611141 60693 CVE-2013-0746 URL:http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html  View
611142 60693 CVE-2013-0746 SUSE:openSUSE-SU-2013:0149  View
611143 60693 CVE-2013-0746 URL:http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html  View
611144 60693 CVE-2013-0746 UBUNTU:USN-1681-1  View
611145 60693 CVE-2013-0746 URL:http://www.ubuntu.com/usn/USN-1681-1  View
611146 60693 CVE-2013-0746 UBUNTU:USN-1681-2  View
611147 60693 CVE-2013-0746 URL:http://www.ubuntu.com/usn/USN-1681-2  View
611148 60693 CVE-2013-0746 UBUNTU:USN-1681-4  View
611149 60693 CVE-2013-0746 URL:http://www.ubuntu.com/usn/USN-1681-4  View
611150 60693 CVE-2013-0746 OVAL:oval:org.mitre.oval:def:16570  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
19493 JVNDB-2013-001067 Android 上の Mozilla Firefox および SeeMonkey における重要な情報を取得される脆弱性 Android 上で稼働する Mozilla Firefox、および SeeMonkey は、単一の IFRAME 要素へのタッチイベントを制限しないため、重要な情報を取得される、またはクロスサイトスクリプティング (XSS) 攻撃を実行される脆弱性が存在します。 CVE-2013-0751 60693 5.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001067.html  View