CVE

Id
61632  
CVE No.
CVE-2013-1685  
Status
Candidate  
Description
Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site.  
Phase
Assigned (20130213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
616850 61632 CVE-2013-1685 CONFIRM:http://www.mozilla.org/security/announce/2013/mfsa2013-50.html  View
616851 61632 CVE-2013-1685 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=871099  View
616852 61632 CVE-2013-1685 DEBIAN:DSA-2716  View
616853 61632 CVE-2013-1685 URL:http://www.debian.org/security/2013/dsa-2716  View
616854 61632 CVE-2013-1685 DEBIAN:DSA-2720  View
616855 61632 CVE-2013-1685 URL:http://www.debian.org/security/2013/dsa-2720  View
616856 61632 CVE-2013-1685 REDHAT:RHSA-2013:0981  View
616857 61632 CVE-2013-1685 URL:http://rhn.redhat.com/errata/RHSA-2013-0981.html  View
616858 61632 CVE-2013-1685 REDHAT:RHSA-2013:0982  View
616859 61632 CVE-2013-1685 URL:http://rhn.redhat.com/errata/RHSA-2013-0982.html  View
616860 61632 CVE-2013-1685 SUSE:SUSE-SU-2013:1152  View
616861 61632 CVE-2013-1685 URL:http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html  View
616862 61632 CVE-2013-1685 SUSE:SUSE-SU-2013:1153  View
616863 61632 CVE-2013-1685 URL:http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html  View
616864 61632 CVE-2013-1685 SUSE:openSUSE-SU-2013:1140  View
616865 61632 CVE-2013-1685 URL:http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html  View
616866 61632 CVE-2013-1685 SUSE:openSUSE-SU-2013:1141  View
616867 61632 CVE-2013-1685 URL:http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html  View
616868 61632 CVE-2013-1685 SUSE:openSUSE-SU-2013:1142  View
616869 61632 CVE-2013-1685 URL:http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html  View
616870 61632 CVE-2013-1685 SUSE:openSUSE-SU-2013:1143  View
616871 61632 CVE-2013-1685 URL:http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html  View
616872 61632 CVE-2013-1685 UBUNTU:USN-1890-1  View
616873 61632 CVE-2013-1685 URL:http://www.ubuntu.com/usn/USN-1890-1  View
616874 61632 CVE-2013-1685 UBUNTU:USN-1891-1  View
616875 61632 CVE-2013-1685 URL:http://www.ubuntu.com/usn/USN-1891-1  View
616876 61632 CVE-2013-1685 BID:60773  View
616877 61632 CVE-2013-1685 URL:http://www.securityfocus.com/bid/60773  View
616878 61632 CVE-2013-1685 OVAL:oval:org.mitre.oval:def:17330  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21552 JVNDB-2013-003127 Mozilla Firefox および Thunderbird におけるサービス運用妨害 (DoS) の脆弱性 Mozilla Firefox および Thunderbird は、ページの再読み込みに関連した onreadystatechange イベントを適切に処理しないため、サービス運用妨害 (アプリケーションクラッシュ) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2013-1690 61632 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003127.html  View