NVD

Id
40889  
Name
CVE-2013-5616  
Description
Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to mListeners event listeners.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-12-11  
Modified Date
2016-12-21  
Seq
2013-5616  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
206770 40889 CVE-2013-5616 FEDORA-2013-23127  View
206771 40889 CVE-2013-5616 FEDORA-2013-23295  View
206772 40889 CVE-2013-5616 FEDORA-2013-23519  View
206773 40889 CVE-2013-5616 FEDORA-2013-23291  View
206774 40889 CVE-2013-5616 SUSE-SU-2013:1919  View
206775 40889 CVE-2013-5616 openSUSE-SU-2013:1916  View
206776 40889 CVE-2013-5616 openSUSE-SU-2013:1917  View
206777 40889 CVE-2013-5616 openSUSE-SU-2013:1918  View
206778 40889 CVE-2013-5616 openSUSE-SU-2013:1957  View
206779 40889 CVE-2013-5616 openSUSE-SU-2013:1958  View
206780 40889 CVE-2013-5616 openSUSE-SU-2013:1959  View
206781 40889 CVE-2013-5616 openSUSE-SU-2014:0008  View
206782 40889 CVE-2013-5616 RHSA-2013:1812  View
206783 40889 CVE-2013-5616 http://www.mozilla.org/security/announce/2013/mfsa2013-108.html  View
206784 40889 CVE-2013-5616 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
206785 40889 CVE-2013-5616 1029470  View
206786 40889 CVE-2013-5616 1029476  View
206787 40889 CVE-2013-5616 USN-2052-1  View
206788 40889 CVE-2013-5616 USN-2053-1  View
206789 40889 CVE-2013-5616 https://bugzilla.mozilla.org/show_bug.cgi?id=938341  View
206790 40889 CVE-2013-5616 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23908 JVNDB-2013-005483 複数の Mozilla 製品の nsEventListenerManager::HandleEventSubType 関数における任意のコードを実行される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の nsEventListenerManager::HandleEventSubType 関数には、mListeners イベントリスナーに関する処理に不備があるため、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される、またはサービス運用妨害 (ヒープメモリ破損) 状態にされる脆弱性が存在します。 CVE-2013-5616 65558 CVE-2013-5616 40889 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005483.html 2013-12-10 2014-03-19 View