CVE

Id
65548  
CVE No.
CVE-2013-5601  
Status
Candidate  
Description
Use-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code via vectors related to a memory allocation through the garbage collection (GC) API.  
Phase
Assigned (20130826)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
639439 65548 CVE-2013-5601 CONFIRM:http://www.mozilla.org/security/announce/2013/mfsa2013-100.html  View
639440 65548 CVE-2013-5601 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=916685  View
639441 65548 CVE-2013-5601 DEBIAN:DSA-2788  View
639442 65548 CVE-2013-5601 URL:http://www.debian.org/security/2013/dsa-2788  View
639443 65548 CVE-2013-5601 DEBIAN:DSA-2797  View
639444 65548 CVE-2013-5601 URL:http://www.debian.org/security/2013/dsa-2797  View
639445 65548 CVE-2013-5601 GENTOO:GLSA-201504-01  View
639446 65548 CVE-2013-5601 URL:https://security.gentoo.org/glsa/201504-01  View
639447 65548 CVE-2013-5601 REDHAT:RHSA-2013:1476  View
639448 65548 CVE-2013-5601 URL:http://rhn.redhat.com/errata/RHSA-2013-1476.html  View
639449 65548 CVE-2013-5601 REDHAT:RHSA-2013:1480  View
639450 65548 CVE-2013-5601 URL:http://rhn.redhat.com/errata/RHSA-2013-1480.html  View
639451 65548 CVE-2013-5601 SUSE:openSUSE-SU-2013:1634  View
639452 65548 CVE-2013-5601 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html  View
639453 65548 CVE-2013-5601 SUSE:SUSE-SU-2013:1678  View
639454 65548 CVE-2013-5601 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html  View
639455 65548 CVE-2013-5601 SUSE:openSUSE-SU-2013:1633  View
639456 65548 CVE-2013-5601 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html  View
639457 65548 CVE-2013-5601 OVAL:oval:org.mitre.oval:def:18495  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23591 JVNDB-2013-005166 Mozilla Network Security Services の lib/certhigh/certvfy.c におけるアクセス制限を回避される脆弱性 Mozilla Network Security Services (NSS) の lib/certhigh/certvfy.c 内の CERT_VerifyCert 関数は、CERTVerifyLog 変数が有効な場合、互換性のないキーを使用する証明書の予期しない戻り値を返すため、アクセス制限を回避される脆弱性が存在します。 CVE-2013-5606 65548 5.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005166.html  View