NVD

Id
37900  
Name
CVE-2013-1738  
Description
Use-after-free vulnerability in the JS_GetGlobalForScopeChain function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code by leveraging incorrect garbage collection in situations involving default compartments and frame-chain restoration.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-09-18  
Modified Date
2017-01-06  
Seq
2013-1738  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
193359 37900 CVE-2013-1738 FEDORA-2013-16992  View
193360 37900 CVE-2013-1738 FEDORA-2013-17074  View
193361 37900 CVE-2013-1738 FEDORA-2013-17047  View
193362 37900 CVE-2013-1738 openSUSE-SU-2013:1491  View
193363 37900 CVE-2013-1738 openSUSE-SU-2013:1493  View
193364 37900 CVE-2013-1738 openSUSE-SU-2013:1495  View
193365 37900 CVE-2013-1738 openSUSE-SU-2013:1499  View
193366 37900 CVE-2013-1738 oval:org.mitre.oval:def:18766  View
193367 37900 CVE-2013-1738 http://www.mozilla.org/security/announce/2013/mfsa2013-92.html  View
193368 37900 CVE-2013-1738 62466  View
193369 37900 CVE-2013-1738 USN-1951-1  View
193370 37900 CVE-2013-1738 USN-1952-1  View
193371 37900 CVE-2013-1738 https://bugzilla.mozilla.org/show_bug.cgi?id=882897  View
193372 37900 CVE-2013-1738 https://bugzilla.mozilla.org/show_bug.cgi?id=887334  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22635 JVNDB-2013-004210 複数の Mozilla 製品における任意のコードを実行される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の JS_GetGlobalForScopeChain 関数には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2013-1738 61680 CVE-2013-1738 37900 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004210.html 2013-09-17 2013-10-29 View