CVE

Id
61651  
CVE No.
CVE-2013-1704  
Status
Candidate  
Description
Use-after-free vulnerability in the nsINode::GetParentNode function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors involving a DOM modification at the time of a SetBody mutation event.  
Phase
Assigned (20130213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
617145 61651 CVE-2013-1704 CONFIRM:http://www.mozilla.org/security/announce/2013/mfsa2013-64.html  View
617146 61651 CVE-2013-1704 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=883313  View
617147 61651 CVE-2013-1704 OVAL:oval:org.mitre.oval:def:18945  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22097 JVNDB-2013-003672 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 複数の Mozilla 製品は、FRAME 要素と履歴との間の対話処理を適切に処理しないため、クロスサイトスクリプティング攻撃を実行される脆弱性が存在します。 CVE-2013-1709 61651 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003672.html  View