NVD

Id
37070  
Name
CVE-2013-0780  
Description
Use-after-free vulnerability in the nsOverflowContinuationTracker::Finish function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted document that uses Cascading Style Sheets (CSS) -moz-column-* properties.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-02-19  
Modified Date
2013-11-02  
Seq
2013-0780  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
189558 37070 CVE-2013-0780 openSUSE-SU-2013:0323  View
189559 37070 CVE-2013-0780 openSUSE-SU-2013:0324  View
189560 37070 CVE-2013-0780 oval:org.mitre.oval:def:16383  View
189561 37070 CVE-2013-0780 RHSA-2013:0271  View
189562 37070 CVE-2013-0780 RHSA-2013:0272  View
189563 37070 CVE-2013-0780 DSA-2699  View
189564 37070 CVE-2013-0780 http://www.mozilla.org/security/announce/2013/mfsa2013-28.html  View
189565 37070 CVE-2013-0780 USN-1729-1  View
189566 37070 CVE-2013-0780 USN-1729-2  View
189567 37070 CVE-2013-0780 USN-1748-1  View
189568 37070 CVE-2013-0780 https://bugzilla.mozilla.org/show_bug.cgi?id=812893  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20041 JVNDB-2013-001616 複数の Mozilla 製品における任意のコードを実行される脆弱性 複数の Mozilla 製品の nsOverflowContinuationTracker::Finish 関数には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される、またはサービス運用妨害 (ヒープメモリの破損) 状態となる脆弱性が存在します。 CVE-2013-0780 60722 CVE-2013-0780 37070 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001616.html 2013-02-19 2013-06-19 View