NVD

Id
37898  
Name
CVE-2013-1736  
Description
The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to improperly establishing parent-child relationships of range-request nodes.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-09-18  
Modified Date
2017-01-06  
Seq
2013-1736  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
193323 37898 CVE-2013-1736 FEDORA-2013-16992  View
193324 37898 CVE-2013-1736 FEDORA-2013-17074  View
193325 37898 CVE-2013-1736 FEDORA-2013-17047  View
193326 37898 CVE-2013-1736 openSUSE-SU-2013:1633  View
193327 37898 CVE-2013-1736 openSUSE-SU-2013:1491  View
193328 37898 CVE-2013-1736 openSUSE-SU-2013:1493  View
193329 37898 CVE-2013-1736 openSUSE-SU-2013:1495  View
193330 37898 CVE-2013-1736 openSUSE-SU-2013:1496  View
193331 37898 CVE-2013-1736 openSUSE-SU-2013:1499  View
193332 37898 CVE-2013-1736 oval:org.mitre.oval:def:18856  View
193333 37898 CVE-2013-1736 RHSA-2013:1268  View
193334 37898 CVE-2013-1736 RHSA-2013:1269  View
193335 37898 CVE-2013-1736 DSA-2762  View
193336 37898 CVE-2013-1736 http://www.mozilla.org/security/announce/2013/mfsa2013-90.html  View
193337 37898 CVE-2013-1736 62478  View
193338 37898 CVE-2013-1736 USN-1951-1  View
193339 37898 CVE-2013-1736 USN-1952-1  View
193340 37898 CVE-2013-1736 https://bugzilla.mozilla.org/show_bug.cgi?id=906301  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22633 JVNDB-2013-004208 複数の Mozilla 製品における任意のコードを実行される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の nsGfxScrollFrameInner::IsLTR 関数は、範囲リクエスト内にノードの異なる親要素と子要素が設定される問題により、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2013-1736 61678 CVE-2013-1736 37898 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004208.html 2013-09-17 2013-10-29 View