NVD

Id
40875  
Name
CVE-2013-5601  
Description
Use-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code via vectors related to a memory allocation through the garbage collection (GC) API.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-10-30  
Modified Date
2016-12-21  
Seq
2013-5601  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
206539 40875 CVE-2013-5601 openSUSE-SU-2013:1633  View
206540 40875 CVE-2013-5601 openSUSE-SU-2013:1634  View
206541 40875 CVE-2013-5601 SUSE-SU-2013:1678  View
206542 40875 CVE-2013-5601 oval:org.mitre.oval:def:18495  View
206543 40875 CVE-2013-5601 RHSA-2013:1476  View
206544 40875 CVE-2013-5601 RHSA-2013:1480  View
206545 40875 CVE-2013-5601 DSA-2788  View
206546 40875 CVE-2013-5601 DSA-2797  View
206547 40875 CVE-2013-5601 http://www.mozilla.org/security/announce/2013/mfsa2013-100.html  View
206548 40875 CVE-2013-5601 https://bugzilla.mozilla.org/show_bug.cgi?id=916685  View
206549 40875 CVE-2013-5601 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23379 JVNDB-2013-004954 複数の Mozilla 製品における任意のコードを実行される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の nsEventListenerManager::SetEventHandler 関数には、ガーベジコレクション (GC) API を使用したメモリ割り当てに関する処理に不備があるため、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2013-5601 65543 CVE-2013-5601 40875 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004954.html 2013-10-29 2013-12-05 View