CVE

Id
61670  
CVE No.
CVE-2013-1723  
Status
Candidate  
Description
The NativeKey widget in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 processes key messages after destruction by a dispatched event listener, which allows remote attackers to cause a denial of service (application crash) by leveraging incorrect event usage after widget-memory reallocation.  
Phase
Assigned (20130213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
617364 61670 CVE-2013-1723 CONFIRM:http://www.mozilla.org/security/announce/2013/mfsa2013-80.html  View
617365 61670 CVE-2013-1723 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=891292  View
617366 61670 CVE-2013-1723 FEDORA:FEDORA-2013-16992  View
617367 61670 CVE-2013-1723 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html  View
617368 61670 CVE-2013-1723 FEDORA:FEDORA-2013-17047  View
617369 61670 CVE-2013-1723 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html  View
617370 61670 CVE-2013-1723 FEDORA:FEDORA-2013-17074  View
617371 61670 CVE-2013-1723 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html  View
617372 61670 CVE-2013-1723 SUSE:openSUSE-SU-2013:1491  View
617373 61670 CVE-2013-1723 URL:http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html  View
617374 61670 CVE-2013-1723 SUSE:openSUSE-SU-2013:1493  View
617375 61670 CVE-2013-1723 URL:http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html  View
617376 61670 CVE-2013-1723 SUSE:openSUSE-SU-2013:1495  View
617377 61670 CVE-2013-1723 URL:http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html  View
617378 61670 CVE-2013-1723 SUSE:openSUSE-SU-2013:1499  View
617379 61670 CVE-2013-1723 URL:http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html  View
617380 61670 CVE-2013-1723 BID:62472  View
617381 61670 CVE-2013-1723 URL:http://www.securityfocus.com/bid/62472  View
617382 61670 CVE-2013-1723 OVAL:oval:org.mitre.oval:def:19028  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22627 JVNDB-2013-004202 複数の Mozilla 製品の IonMonkey JavaScript エンジンにおける重要な情報を取得される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の IonMonkey JavaScript エンジンには、Valgrind モードを使用した際に、メモリを適切に初期化しないため、重要な情報を取得される脆弱性が存在します。 CVE-2013-1728 61670 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004202.html  View