CVE

Id
60722  
CVE No.
CVE-2013-0775  
Status
Candidate  
Description
Use-after-free vulnerability in the nsImageLoadingContent::OnStopContainer function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code via crafted web script.  
Phase
Assigned (20130102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
611669 60722 CVE-2013-0775 CONFIRM:http://www.mozilla.org/security/announce/2013/mfsa2013-26.html  View
611670 60722 CVE-2013-0775 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=831095  View
611671 60722 CVE-2013-0775 DEBIAN:DSA-2699  View
611672 60722 CVE-2013-0775 URL:http://www.debian.org/security/2013/dsa-2699  View
611673 60722 CVE-2013-0775 REDHAT:RHSA-2013:0271  View
611674 60722 CVE-2013-0775 URL:http://rhn.redhat.com/errata/RHSA-2013-0271.html  View
611675 60722 CVE-2013-0775 REDHAT:RHSA-2013:0272  View
611676 60722 CVE-2013-0775 URL:http://rhn.redhat.com/errata/RHSA-2013-0272.html  View
611677 60722 CVE-2013-0775 SUSE:openSUSE-SU-2013:0323  View
611678 60722 CVE-2013-0775 URL:http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html  View
611679 60722 CVE-2013-0775 SUSE:openSUSE-SU-2013:0324  View
611680 60722 CVE-2013-0775 URL:http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html  View
611681 60722 CVE-2013-0775 UBUNTU:USN-1729-1  View
611682 60722 CVE-2013-0775 URL:http://www.ubuntu.com/usn/USN-1729-1  View
611683 60722 CVE-2013-0775 UBUNTU:USN-1729-2  View
611684 60722 CVE-2013-0775 URL:http://www.ubuntu.com/usn/USN-1729-2  View
611685 60722 CVE-2013-0775 UBUNTU:USN-1748-1  View
611686 60722 CVE-2013-0775 URL:http://www.ubuntu.com/usn/USN-1748-1  View
611687 60722 CVE-2013-0775 OVAL:oval:org.mitre.oval:def:16950  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20041 JVNDB-2013-001616 複数の Mozilla 製品における任意のコードを実行される脆弱性 複数の Mozilla 製品の nsOverflowContinuationTracker::Finish 関数には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される、またはサービス運用妨害 (ヒープメモリの破損) 状態となる脆弱性が存在します。 CVE-2013-0780 60722 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001616.html  View