NVD

Id
40876  
Name
CVE-2013-5602  
Description
The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to direct proxies.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-10-30  
Modified Date
2016-12-21  
Seq
2013-5602  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
206550 40876 CVE-2013-5602 openSUSE-SU-2013:1633  View
206551 40876 CVE-2013-5602 openSUSE-SU-2013:1634  View
206552 40876 CVE-2013-5602 SUSE-SU-2013:1678  View
206553 40876 CVE-2013-5602 oval:org.mitre.oval:def:19293  View
206554 40876 CVE-2013-5602 RHSA-2013:1476  View
206555 40876 CVE-2013-5602 RHSA-2013:1480  View
206556 40876 CVE-2013-5602 DSA-2788  View
206557 40876 CVE-2013-5602 DSA-2797  View
206558 40876 CVE-2013-5602 http://www.mozilla.org/security/announce/2013/mfsa2013-101.html  View
206559 40876 CVE-2013-5602 https://bugzilla.mozilla.org/show_bug.cgi?id=897678  View
206560 40876 CVE-2013-5602 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23380 JVNDB-2013-004955 複数の Mozilla 製品における任意のコードを実行される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の Web ワーカーに実装の Worker::SetEventListener 関数には、ダイレクトプロキシに関する処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2013-5602 65544 CVE-2013-5602 40876 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004955.html 2013-10-29 2013-12-05 View