Lucene search
Mozilla FoundationMFSA2013-16HistoryJan 08, 2013 - 12:00 a.m.
Use-after-free in serializeToStream — Mozilla
2013-01-0800:00:00
Mozilla Foundation
www.mozilla.org
30
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.971
Percentile
99.8%
Security researcher regenrecht reported, via TippingPoint’s Zero Day Initiative, a use-after-free in XMLSerializer by the exposing of serializeToStream to web content. This can lead to arbitrary code execution when exploited.
Affected configurations
Node
mozillafirefoxRange<18
ORmozillafirefox_esrRange<10.0.12
ORmozillafirefox_esrRange<17.0.2
ORmozillaseamonkeyRange<2.15
ORmozillathunderbirdRange<17.0.2
ORmozillathunderbird_esrRange<10.0.12
ORmozillathunderbird_esrRange<17.0.2
Related
zdi
zdi
nvd
nvd
CVE-2013-0753
2013-01-13 20:55:01
prion
prion
Design/Logic Flaw
2013-01-13 20:55:00
cvelist
cvelist
CVE-2013-0753
2013-01-13 20:00:00
cve
cve
CVE-2013-0753
2013-01-13 20:55:01
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-16) - Linux
2021-11-11 00:00:00
Mozilla Products Multiple Vulnerabilities (Jan 2013) - Windows
2013-01-16 00:00:00
Mozilla Products Multiple Vulnerabilities January13 (Windows)
2013-01-16 00:00:00
ubuntucve
ubuntucve
CVE-2013-0753
2013-01-09 00:00:00
saint
saint
Mozilla Firefox XMLSerializer serializeToStream Use-after-free Vulnerability
2013-10-17 00:00:00
Mozilla Firefox XMLSerializer serializeToStream Use-after-free Vulnerability
2013-10-17 00:00:00
Mozilla Firefox XMLSerializer serializeToStream Use-after-free Vulnerability
2013-10-17 00:00:00
packetstorm
packetstorm
Firefox XMLSerializer Use After Free
2013-08-29 00:00:00
zdt
zdt
Firefox XMLSerializer Use After Free Vulnerability
2013-08-29 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox XMLSerializer use-after-free (CVE-2013-0753)
2013-09-22 00:00:00
thn
thn
A Simple JavaScript Exploit Bypasses ASLR Protection On 22 CPU Architectures
2017-02-16 06:14:00
veracode
veracode
Memory Corruption
2019-05-02 04:45:41
Out-Of-Bounds Read
2019-05-02 04:45:40
Use-After-Free
2019-05-02 04:45:40
redhat
redhat
(RHSA-2013:0144) Critical: firefox security update
2013-01-08 00:00:00
(RHSA-2013:0145) Critical: thunderbird security update
2013-01-08 00:00:00
nessus
nessus
Oracle Linux 6 : thunderbird (ELSA-2013-0145)
2013-07-12 00:00:00
CentOS 5 / 6 : thunderbird (CESA-2013:0145)
2013-01-09 00:00:00
centos
centos
firefox, xulrunner security update
2013-01-09 05:51:05
thunderbird security update
2013-01-09 05:51:41
oraclelinux
oraclelinux
firefox security update
2013-01-08 00:00:00
thunderbird security update
2013-01-08 00:00:00
suse
suse
Security update for Mozilla Firefox (important)
2013-02-18 18:04:29
Security update for MozillaFirefox (important)
2013-01-18 19:04:49
Security update for MozillaFirefox (important)
2013-02-13 23:04:32
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-01-08 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-01-10 00:00:00
ibm
ibm
ubuntu
ubuntu
Firefox regression
2013-01-22 00:00:00
Firefox regression
2013-02-05 00:00:00
Firefox vulnerabilities
2013-01-09 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-09-27 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.971
Percentile
99.8%
Related for MFSA2013-16