Lucene search
Mozilla FoundationMFSA2013-29HistoryMar 07, 2013 - 12:00 a.m.
Use-after-free in HTML Editor — Mozilla
2013-03-0700:00:00
Mozilla Foundation
www.mozilla.org
31
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.097
Percentile
94.8%
VUPEN Security, via TippingPoint’s Zero Day Initiative, reported a use-after-free within the HTML editor when content script is run by the document.execCommand() function while internal editor operations are occurring. This could allow for arbitrary code execution.
Affected configurations
Node
mozillafirefoxRange<19.0.2
ORmozillafirefox_esrRange<17.0.4
ORmozillaseamonkeyRange<2.16.1
ORmozillathunderbirdRange<17.0.4
ORmozillathunderbird_esrRange<17.0.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | firefox | * | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* |
| mozilla | firefox_esr | * | cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* |
| mozilla | seamonkey | * | cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:* |
| mozilla | thunderbird | * | cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
| mozilla | thunderbird_esr | * | cpe:2.3:a:mozilla:thunderbird_esr:*:*:*:*:*:*:*:* |
Related
centos
centos
thunderbird security update
2013-03-12 05:37:59
xulrunner security update
2013-03-08 16:45:51
nessus
nessus
Mozilla Thunderbird ESR 17.x < 17.0.4 nsHTMLEditor Use-After-Free
2013-03-11 00:00:00
SeaMonkey < 2.16.1 nsHTMLEditor Use-After-Free
2013-03-11 00:00:00
Firefox ESR 17.x < 17.0.4 nsHTMLEditor Use-After-Free
2013-03-08 00:00:00
openvas
openvas
RedHat Update for thunderbird RHSA-2013:0627-01
2013-03-12 00:00:00
CentOS Update for thunderbird CESA-2013:0627 centos6
2013-03-15 00:00:00
CentOS Update for xulrunner CESA-2013:0614 centos6
2013-03-12 00:00:00
suse
suse
Mozilla updates (FF 19.0.2, SM 2.16.1, TB 17.0.4) (important)
2013-03-12 11:04:38
xulrunner to 17.0.4esr (important)
2013-03-15 12:04:43
MozillaFirefox: Updated to 19.0.2 (important)
2013-03-15 12:04:55
prion
prion
Design/Logic Flaw
2013-03-11 10:55:00
Design/Logic Flaw
2013-03-11 10:55:00
zdi
zdi
ubuntu
ubuntu
Thunderbird vulnerability
2013-03-13 00:00:00
Firefox vulnerability
2013-03-08 00:00:00
redhat
redhat
(RHSA-2013:0614) Critical: xulrunner security update
2013-03-08 00:00:00
(RHSA-2013:0627) Important: thunderbird security update
2013-03-11 00:00:00
securityvulns
securityvulns
oraclelinux
oraclelinux
xulrunner security update
2013-03-08 00:00:00
thunderbird security update
2013-03-11 00:00:00
cvelist
cvelist
CVE-2013-0787
2013-03-11 10:00:00
CVE-2013-2554
2013-03-11 10:00:00
freebsd
freebsd
mozilla -- use-after-free in HTML Editor
2013-03-07 00:00:00
nvd
nvd
CVE-2013-0787
2013-03-11 10:55:00
CVE-2013-2554
2013-03-11 10:55:01
ubuntucve
ubuntucve
CVE-2013-0787
2013-03-08 00:00:00
cve
cve
CVE-2013-0787
2013-03-11 10:55:00
CVE-2013-2554
2013-03-11 10:55:01
veracode
veracode
Arbitrary Code Execution
2019-01-15 08:59:41
debian
debian
[SECURITY] [DSA 2699-1] iceweasel security update
2013-06-02 16:37:13
ibm
ibm
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-09-27 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.097
Percentile
94.8%
Related for MFSA2013-29