CVE

Id
65544  
CVE No.
CVE-2013-5597  
Status
Candidate  
Description
Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving a state-change event during an update of the offline cache.  
Phase
Assigned (20130826)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
639373 65544 CVE-2013-5597 CONFIRM:http://www.mozilla.org/security/announce/2013/mfsa2013-98.html  View
639374 65544 CVE-2013-5597 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=918864  View
639375 65544 CVE-2013-5597 DEBIAN:DSA-2788  View
639376 65544 CVE-2013-5597 URL:http://www.debian.org/security/2013/dsa-2788  View
639377 65544 CVE-2013-5597 DEBIAN:DSA-2797  View
639378 65544 CVE-2013-5597 URL:http://www.debian.org/security/2013/dsa-2797  View
639379 65544 CVE-2013-5597 GENTOO:GLSA-201504-01  View
639380 65544 CVE-2013-5597 URL:https://security.gentoo.org/glsa/201504-01  View
639381 65544 CVE-2013-5597 REDHAT:RHSA-2013:1476  View
639382 65544 CVE-2013-5597 URL:http://rhn.redhat.com/errata/RHSA-2013-1476.html  View
639383 65544 CVE-2013-5597 REDHAT:RHSA-2013:1480  View
639384 65544 CVE-2013-5597 URL:http://rhn.redhat.com/errata/RHSA-2013-1480.html  View
639385 65544 CVE-2013-5597 SUSE:openSUSE-SU-2013:1634  View
639386 65544 CVE-2013-5597 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html  View
639387 65544 CVE-2013-5597 SUSE:SUSE-SU-2013:1678  View
639388 65544 CVE-2013-5597 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html  View
639389 65544 CVE-2013-5597 SUSE:openSUSE-SU-2013:1633  View
639390 65544 CVE-2013-5597 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html  View
639391 65544 CVE-2013-5597 OVAL:oval:org.mitre.oval:def:19277  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23380 JVNDB-2013-004955 複数の Mozilla 製品における任意のコードを実行される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の Web ワーカーに実装の Worker::SetEventListener 関数には、ダイレクトプロキシに関する処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2013-5602 65544 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004955.html  View