CVE

Id
60695  
CVE No.
CVE-2013-0748  
Status
Candidate  
Description
The XBL.__proto__.toString implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 makes it easier for remote attackers to bypass the ASLR protection mechanism by calling the toString function of an XBL object.  
Phase
Assigned (20130102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
611168 60695 CVE-2013-0748 CONFIRM:http://www.mozilla.org/security/announce/2013/mfsa2013-11.html  View
611169 60695 CVE-2013-0748 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=806031  View
611170 60695 CVE-2013-0748 REDHAT:RHSA-2013:0144  View
611171 60695 CVE-2013-0748 URL:http://rhn.redhat.com/errata/RHSA-2013-0144.html  View
611172 60695 CVE-2013-0748 REDHAT:RHSA-2013:0145  View
611173 60695 CVE-2013-0748 URL:http://rhn.redhat.com/errata/RHSA-2013-0145.html  View
611174 60695 CVE-2013-0748 SUSE:SUSE-SU-2013:0048  View
611175 60695 CVE-2013-0748 URL:http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html  View
611176 60695 CVE-2013-0748 SUSE:SUSE-SU-2013:0049  View
611177 60695 CVE-2013-0748 URL:http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html  View
611178 60695 CVE-2013-0748 SUSE:openSUSE-SU-2013:0131  View
611179 60695 CVE-2013-0748 URL:http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html  View
611180 60695 CVE-2013-0748 SUSE:openSUSE-SU-2013:0149  View
611181 60695 CVE-2013-0748 URL:http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html  View
611182 60695 CVE-2013-0748 UBUNTU:USN-1681-1  View
611183 60695 CVE-2013-0748 URL:http://www.ubuntu.com/usn/USN-1681-1  View
611184 60695 CVE-2013-0748 UBUNTU:USN-1681-2  View
611185 60695 CVE-2013-0748 URL:http://www.ubuntu.com/usn/USN-1681-2  View
611186 60695 CVE-2013-0748 UBUNTU:USN-1681-4  View
611187 60695 CVE-2013-0748 URL:http://www.ubuntu.com/usn/USN-1681-4  View
611188 60695 CVE-2013-0748 OVAL:oval:org.mitre.oval:def:17109  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
19495 JVNDB-2013-001069 複数の Mozilla 製品の serializeToStream の実装における任意のコードを実行される脆弱性 複数の Mozilla 製品の serializeToStream の実装には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2013-0753 60695 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001069.html  View