NVD

Id
40874  
Name
CVE-2013-5600  
Description
Use-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code via vectors involving a blob: URL.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-10-30  
Modified Date
2016-12-21  
Seq
2013-5600  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
206528 40874 CVE-2013-5600 openSUSE-SU-2013:1633  View
206529 40874 CVE-2013-5600 openSUSE-SU-2013:1634  View
206530 40874 CVE-2013-5600 SUSE-SU-2013:1678  View
206531 40874 CVE-2013-5600 oval:org.mitre.oval:def:19172  View
206532 40874 CVE-2013-5600 RHSA-2013:1476  View
206533 40874 CVE-2013-5600 RHSA-2013:1480  View
206534 40874 CVE-2013-5600 DSA-2788  View
206535 40874 CVE-2013-5600 DSA-2797  View
206536 40874 CVE-2013-5600 http://www.mozilla.org/security/announce/2013/mfsa2013-100.html  View
206537 40874 CVE-2013-5600 https://bugzilla.mozilla.org/show_bug.cgi?id=916576  View
206538 40874 CVE-2013-5600 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23378 JVNDB-2013-004953 複数の Mozilla 製品における任意のコードを実行される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の nsIOService::NewChannelFromURIWithProxyFlags 関数には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2013-5600 65542 CVE-2013-5600 40874 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004953.html 2013-10-29 2013-12-05 View