NVD

Id
37036  
Name
CVE-2013-0746  
Description
Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 do not properly implement quickstubs that use the jsval data type for their return values, which allows remote attackers to execute arbitrary code or cause a denial of service (compartment mismatch and application crash) via crafted JavaScript code that is not properly handled during garbage collection.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-01-13  
Modified Date
2013-11-02  
Seq
2013-0746  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
189190 37036 CVE-2013-0746 SUSE-SU-2013:0048  View
189191 37036 CVE-2013-0746 SUSE-SU-2013:0049  View
189192 37036 CVE-2013-0746 openSUSE-SU-2013:0131  View
189193 37036 CVE-2013-0746 openSUSE-SU-2013:0149  View
189194 37036 CVE-2013-0746 oval:org.mitre.oval:def:16570  View
189195 37036 CVE-2013-0746 RHSA-2013:0144  View
189196 37036 CVE-2013-0746 RHSA-2013:0145  View
189197 37036 CVE-2013-0746 http://www.mozilla.org/security/announce/2013/mfsa2013-09.html  View
189198 37036 CVE-2013-0746 USN-1681-1  View
189199 37036 CVE-2013-0746 USN-1681-2  View
189200 37036 CVE-2013-0746 USN-1681-4  View
189201 37036 CVE-2013-0746 https://bugzilla.mozilla.org/show_bug.cgi?id=816842  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19488 JVNDB-2013-001062 複数の Mozilla 製品における任意のコードを実行される脆弱性 複数の Mozilla 製品は、戻り値に対して jsval のデータ型を利用するクイックスタブを適切に実装しないため、任意のコードを実行される、またはサービス運用妨害 (コンパートメントの不一致およびアプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2013-0746 60688 CVE-2013-0746 37036 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001062.html 2013-01-08 2013-02-22 View