NVD

Id
37043  
Name
CVE-2013-0753  
Description
Use-after-free vulnerability in the serializeToStream implementation in the XMLSerializer component in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via crafted web content.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-01-13  
Modified Date
2013-11-02  
Seq
2013-0753  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
189272 37043 CVE-2013-0753 SUSE-SU-2013:0048  View
189273 37043 CVE-2013-0753 SUSE-SU-2013:0049  View
189274 37043 CVE-2013-0753 openSUSE-SU-2013:0131  View
189275 37043 CVE-2013-0753 openSUSE-SU-2013:0149  View
189276 37043 CVE-2013-0753 oval:org.mitre.oval:def:17053  View
189277 37043 CVE-2013-0753 RHSA-2013:0144  View
189278 37043 CVE-2013-0753 RHSA-2013:0145  View
189279 37043 CVE-2013-0753 http://www.mozilla.org/security/announce/2013/mfsa2013-16.html  View
189280 37043 CVE-2013-0753 USN-1681-1  View
189281 37043 CVE-2013-0753 USN-1681-2  View
189282 37043 CVE-2013-0753 USN-1681-4  View
189283 37043 CVE-2013-0753 https://bugzilla.mozilla.org/show_bug.cgi?id=814001  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19495 JVNDB-2013-001069 複数の Mozilla 製品の serializeToStream の実装における任意のコードを実行される脆弱性 複数の Mozilla 製品の serializeToStream の実装には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2013-0753 60695 CVE-2013-0753 37043 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001069.html 2013-01-08 2013-02-25 View