NVD

Id
37858  
Name
CVE-2013-1694  
Description
The PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly handle the lack of a wrapper, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by leveraging unintended clearing of the wrapper cache"s preserved-wrapper flag.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-06-25  
Modified Date
2017-01-06  
Seq
2013-1694  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
192969 37858 CVE-2013-1694 openSUSE-SU-2013:1140  View
192970 37858 CVE-2013-1694 openSUSE-SU-2013:1141  View
192971 37858 CVE-2013-1694 openSUSE-SU-2013:1142  View
192972 37858 CVE-2013-1694 openSUSE-SU-2013:1143  View
192973 37858 CVE-2013-1694 oval:org.mitre.oval:def:17405  View
192974 37858 CVE-2013-1694 RHSA-2013:0981  View
192975 37858 CVE-2013-1694 RHSA-2013:0982  View
192976 37858 CVE-2013-1694 DSA-2716  View
192977 37858 CVE-2013-1694 DSA-2720  View
192978 37858 CVE-2013-1694 http://www.mozilla.org/security/announce/2013/mfsa2013-56.html  View
192979 37858 CVE-2013-1694 60776  View
192980 37858 CVE-2013-1694 USN-1890-1  View
192981 37858 CVE-2013-1694 USN-1891-1  View
192982 37858 CVE-2013-1694 https://bugzilla.mozilla.org/show_bug.cgi?id=848535  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21555 JVNDB-2013-003130 Mozilla Firefox および Thunderbird の PreserveWrapper の実装におけるサービス運用妨害 (DoS) の脆弱性 Mozilla Firefox および Thunderbird の PreserveWrapper の実装は、ラッパーの欠如を適切に処理しないため、サービス運用妨害 (アプリケーションクラッシュ) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2013-1694 61636 CVE-2013-1694 37858 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003130.html 2013-06-25 2013-07-08 View