CVE-2013-0755

Use-after-free vulnerability in the mozVibrate implementation in the Vibrate library in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via vectors related to the domDoc pointer.
Severity
UNKNOWN
AV:N/AC:M/Au:N/C:C/I:C/A:C
Atk. Vector
NETWORK
Atk. Complexity
MEDIUM
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
VendorProductVersion
mozillafirefox
𝑥
< 17.0.2
mozillafirefox
𝑥
< 18.0
mozillaseamonkey
𝑥
< 2.15
mozillathunderbird
𝑥
< 17.0.2
mozillathunderbird_esr
𝑥
< 17.0.2
opensuseopensuse
11.4
opensuseopensuse
12.1
opensuseopensuse
12.2
canonicalubuntu_linux
10.04
canonicalubuntu_linux
11.10
canonicalubuntu_linux
12.04
canonicalubuntu_linux
12.10
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
saucy
Fixed 19.0~b1+build2-0ubuntu1
released
raring
Fixed 19.0~b1+build2-0ubuntu1
released
quantal
Fixed 18.0+build1-0ubuntu0.12.10.3
released
precise
Fixed 18.0+build1-0ubuntu0.12.04.3
released
oneiric
Fixed 18.0+build1-0ubuntu0.11.10.3
released
lucid
Fixed 18.0+build1-0ubuntu0.10.04.3
released
hardy
ignored
seamonkey
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
ignored
lucid
ignored
hardy
ignored
thunderbird
saucy
Fixed 17.0.2+build1-0ubuntu1
released
raring
Fixed 17.0.2+build1-0ubuntu1
released
quantal
Fixed 17.0.2+build1-0ubuntu0.12.10.1
released
precise
Fixed 17.0.2+build1-0ubuntu0.12.04.1
released
oneiric
Fixed 17.0.2+build1-0ubuntu0.11.10.1
released
lucid
Fixed 17.0.2+build1-0ubuntu0.10.04.1
released
hardy
ignored
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html
http://www.mozilla.org/security/announce/2013/mfsa2013-18.html
http://www.ubuntu.com/usn/USN-1681-1
http://www.ubuntu.com/usn/USN-1681-2
http://www.ubuntu.com/usn/USN-1681-4
https://bugzilla.mozilla.org/show_bug.cgi?id=814027
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16952
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html
http://www.mozilla.org/security/announce/2013/mfsa2013-18.html
http://www.ubuntu.com/usn/USN-1681-1
http://www.ubuntu.com/usn/USN-1681-2
http://www.ubuntu.com/usn/USN-1681-4
https://bugzilla.mozilla.org/show_bug.cgi?id=814027
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16952