NVD

Id
37077  
Name
CVE-2013-0787  
Description
Use-after-free vulnerability in the nsEditor::IsPreformatted function in editor/libeditor/base/nsEditor.cpp in Mozilla Firefox before 19.0.2, Firefox ESR 17.x before 17.0.4, Thunderbird before 17.0.4, Thunderbird ESR 17.x before 17.0.4, and SeaMonkey before 2.16.1 allows remote attackers to execute arbitrary code via vectors involving an execCommand call.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-03-11  
Modified Date
2017-01-06  
Seq
2013-0787  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
189633 37077 CVE-2013-0787 http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157  View
189634 37077 CVE-2013-0787 openSUSE-SU-2013:0431  View
189635 37077 CVE-2013-0787 openSUSE-SU-2013:0465  View
189636 37077 CVE-2013-0787 openSUSE-SU-2013:0467  View
189637 37077 CVE-2013-0787 openSUSE-SU-2013:0468  View
189638 37077 CVE-2013-0787 SUSE-SU-2013:0470  View
189639 37077 CVE-2013-0787 oval:org.mitre.oval:def:16737  View
189640 37077 CVE-2013-0787 RHSA-2013:0614  View
189641 37077 CVE-2013-0787 RHSA-2013:0627  View
189642 37077 CVE-2013-0787 http://twitter.com/thezdi/statuses/309484730506698752  View
189643 37077 CVE-2013-0787 http://twitter.com/VUPEN/statuses/309505403631325184  View
189644 37077 CVE-2013-0787 DSA-2699  View
189645 37077 CVE-2013-0787 http://www.mozilla.org/security/announce/2013/mfsa2013-29.html  View
189646 37077 CVE-2013-0787 58391  View
189647 37077 CVE-2013-0787 USN-1758-1  View
189648 37077 CVE-2013-0787 https://bugzilla.mozilla.org/show_bug.cgi?id=848644  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20244 JVNDB-2013-001819 複数の Mozilla 製品の editor/libeditor/base/nsEditor.cpp における任意のコードを実行される脆弱性 複数の Mozilla 製品の editor/libeditor/base/nsEditor.cpp 内の nsEditor::IsPreformatted 関数は、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2013-0787 60729 CVE-2013-0787 37077 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001819.html 2013-03-07 2013-06-19 View