Lucene search
Ubuntu.comUB:CVE-2013-0787HistoryMar 08, 2013 - 12:00 a.m.
CVE-2013-0787
2013-03-0800:00:00
ubuntu.com
ubuntu.com
14
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.097
Percentile
94.8%
Use-after-free vulnerability in the nsEditor::IsPreformatted function in
editor/libeditor/base/nsEditor.cpp in Mozilla Firefox before 19.0.2,
Firefox ESR 17.x before 17.0.4, Thunderbird before 17.0.4, Thunderbird ESR
17.x before 17.0.4, and SeaMonkey before 2.16.1 allows remote attackers to
execute arbitrary code via vectors involving an execCommand call.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | firefox | < 19.0.2+build1-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 11.10 | noarch | firefox | < 19.0.2+build1-0ubuntu0.11.10.1 | UNKNOWN |
| ubuntu | 12.04 | noarch | firefox | < 19.0.2+build1-0ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 12.10 | noarch | firefox | < 19.0.2+build1-0ubuntu0.12.10.1 | UNKNOWN |
| ubuntu | 13.04 | noarch | firefox | < 19.0.2+build1-0ubuntu1 | UNKNOWN |
| ubuntu | 13.10 | noarch | firefox | < 19.0.2+build1-0ubuntu1 | UNKNOWN |
| ubuntu | 10.04 | noarch | thunderbird | < 17.0.4+build1-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 11.10 | noarch | thunderbird | < 17.0.4+build1-0ubuntu0.11.10.1 | UNKNOWN |
| ubuntu | 12.04 | noarch | thunderbird | < 17.0.4+build1-0ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 12.10 | noarch | thunderbird | < 17.0.4+build1-0ubuntu0.12.10.1 | UNKNOWN |
References
Related
centos
centos
thunderbird security update
2013-03-12 05:37:59
xulrunner security update
2013-03-08 16:45:51
nessus
nessus
Mozilla Thunderbird ESR 17.x < 17.0.4 nsHTMLEditor Use-After-Free
2013-03-11 00:00:00
SeaMonkey < 2.16.1 nsHTMLEditor Use-After-Free
2013-03-11 00:00:00
Firefox ESR 17.x < 17.0.4 nsHTMLEditor Use-After-Free
2013-03-08 00:00:00
openvas
openvas
RedHat Update for thunderbird RHSA-2013:0627-01
2013-03-12 00:00:00
CentOS Update for thunderbird CESA-2013:0627 centos6
2013-03-15 00:00:00
CentOS Update for xulrunner CESA-2013:0614 centos6
2013-03-12 00:00:00
suse
suse
Mozilla updates (FF 19.0.2, SM 2.16.1, TB 17.0.4) (important)
2013-03-12 11:04:38
xulrunner to 17.0.4esr (important)
2013-03-15 12:04:43
MozillaFirefox: Updated to 19.0.2 (important)
2013-03-15 12:04:55
prion
prion
Design/Logic Flaw
2013-03-11 10:55:00
Design/Logic Flaw
2013-03-11 10:55:00
zdi
zdi
ubuntu
ubuntu
Thunderbird vulnerability
2013-03-13 00:00:00
Firefox vulnerability
2013-03-08 00:00:00
redhat
redhat
(RHSA-2013:0614) Critical: xulrunner security update
2013-03-08 00:00:00
(RHSA-2013:0627) Important: thunderbird security update
2013-03-11 00:00:00
securityvulns
securityvulns
oraclelinux
oraclelinux
xulrunner security update
2013-03-08 00:00:00
thunderbird security update
2013-03-11 00:00:00
cvelist
cvelist
CVE-2013-0787
2013-03-11 10:00:00
CVE-2013-2554
2013-03-11 10:00:00
nvd
nvd
CVE-2013-0787
2013-03-11 10:55:00
CVE-2013-2554
2013-03-11 10:55:01
cve
cve
CVE-2013-0787
2013-03-11 10:55:00
CVE-2013-2554
2013-03-11 10:55:01
veracode
veracode
Arbitrary Code Execution
2019-01-15 08:59:41
mozilla
mozilla
Use-after-free in HTML Editor — Mozilla
2013-03-07 00:00:00
freebsd
freebsd
mozilla -- use-after-free in HTML Editor
2013-03-07 00:00:00
debian
debian
[SECURITY] [DSA 2699-1] iceweasel security update
2013-06-02 16:37:13
ibm
ibm
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-09-27 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.097
Percentile
94.8%
Related for UB:CVE-2013-0787