NVD

Id
40873  
Name
CVE-2013-5599  
Description
Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka presentation shell) implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors involving a CANVAS element, a mozTextStyle attribute, and an onresize event.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-10-30  
Modified Date
2016-12-21  
Seq
2013-5599  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
206517 40873 CVE-2013-5599 openSUSE-SU-2013:1633  View
206518 40873 CVE-2013-5599 openSUSE-SU-2013:1634  View
206519 40873 CVE-2013-5599 SUSE-SU-2013:1678  View
206520 40873 CVE-2013-5599 oval:org.mitre.oval:def:19315  View
206521 40873 CVE-2013-5599 RHSA-2013:1476  View
206522 40873 CVE-2013-5599 RHSA-2013:1480  View
206523 40873 CVE-2013-5599 DSA-2788  View
206524 40873 CVE-2013-5599 DSA-2797  View
206525 40873 CVE-2013-5599 http://www.mozilla.org/security/announce/2013/mfsa2013-100.html  View
206526 40873 CVE-2013-5599 https://bugzilla.mozilla.org/show_bug.cgi?id=915210  View
206527 40873 CVE-2013-5599 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23377 JVNDB-2013-004952 複数の Mozilla 製品における任意のコードを実行される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の PresShell (別名 presentation shell) の実装の nsIPresShell::GetPresContext 関数には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される、またはサービス運用妨害 (ヒープメモリの破損およびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2013-5599 65541 CVE-2013-5599 40873 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004952.html 2013-10-29 2013-12-05 View