CVE

Id
61667  
CVE No.
CVE-2013-1720  
Status
Candidate  
Description
The nsHtml5TreeBuilder::resetTheInsertionMode function in the HTML5 Tree Builder in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 does not properly maintain the state of the insertion-mode stack for template elements, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer over-read) by triggering use of this stack in its empty state.  
Phase
Assigned (20130213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
617289 61667 CVE-2013-1720 CONFIRM:http://www.mozilla.org/security/announce/2013/mfsa2013-77.html  View
617290 61667 CVE-2013-1720 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=888820  View
617291 61667 CVE-2013-1720 FEDORA:FEDORA-2013-16992  View
617292 61667 CVE-2013-1720 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html  View
617293 61667 CVE-2013-1720 FEDORA:FEDORA-2013-17047  View
617294 61667 CVE-2013-1720 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html  View
617295 61667 CVE-2013-1720 FEDORA:FEDORA-2013-17074  View
617296 61667 CVE-2013-1720 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html  View
617297 61667 CVE-2013-1720 SUSE:openSUSE-SU-2013:1491  View
617298 61667 CVE-2013-1720 URL:http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html  View
617299 61667 CVE-2013-1720 SUSE:openSUSE-SU-2013:1493  View
617300 61667 CVE-2013-1720 URL:http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html  View
617301 61667 CVE-2013-1720 SUSE:openSUSE-SU-2013:1495  View
617302 61667 CVE-2013-1720 URL:http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html  View
617303 61667 CVE-2013-1720 SUSE:openSUSE-SU-2013:1499  View
617304 61667 CVE-2013-1720 URL:http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html  View
617305 61667 CVE-2013-1720 UBUNTU:USN-1951-1  View
617306 61667 CVE-2013-1720 URL:http://www.ubuntu.com/usn/USN-1951-1  View
617307 61667 CVE-2013-1720 UBUNTU:USN-1952-1  View
617308 61667 CVE-2013-1720 URL:http://www.ubuntu.com/usn/USN-1952-1  View
617309 61667 CVE-2013-1720 BID:62465  View
617310 61667 CVE-2013-1720 URL:http://www.securityfocus.com/bid/62465  View
617311 61667 CVE-2013-1720 OVAL:oval:org.mitre.oval:def:18617  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22624 JVNDB-2013-004199 複数の Mozilla 製品における任意のコードを実行される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey は、コンパートメントを伴う JavaScript オブジェクトが初期化されることを保証しないため、任意のコードを実行される脆弱性が存在します。 CVE-2013-1725 61667 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004199.html  View