CVE-2013-0787

Use-after-free vulnerability in the nsEditor::IsPreformatted function in editor/libeditor/base/nsEditor.cpp in Mozilla Firefox before 19.0.2, Firefox ESR 17.x before 17.0.4, Thunderbird before 17.0.4, Thunderbird ESR 17.x before 17.0.4, and SeaMonkey before 2.16.1 allows remote attackers to execute arbitrary code via vectors involving an execCommand call.
Severity
UNKNOWN
AV:N/AC:M/Au:N/C:C/I:C/A:C
Atk. Vector
NETWORK
Atk. Complexity
MEDIUM
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
VendorProductVersion
mozillafirefox
𝑥
≤ 19.0.1
mozillafirefox
19.0
mozillafirefox
17.0
mozillafirefox
17.0.1
mozillafirefox
17.0.2
mozillafirefox
17.0.3
mozillathunderbird
𝑥
≤ 17.0.3
mozillathunderbird
17.0
mozillathunderbird
17.0.1
mozillathunderbird
17.0.2
mozillathunderbird_esr
17.0
mozillathunderbird_esr
17.0.1
mozillathunderbird_esr
17.0.2
mozillathunderbird_esr
17.0.3
mozillaseamonkey
𝑥
≤ 2.16
mozillaseamonkey
2.16
mozillaseamonkey
2.16
mozillaseamonkey
2.16
mozillaseamonkey
2.16
mozillaseamonkey
2.16
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
saucy
Fixed 19.0.2+build1-0ubuntu1
released
raring
Fixed 19.0.2+build1-0ubuntu1
released
quantal
Fixed 19.0.2+build1-0ubuntu0.12.10.1
released
precise
Fixed 19.0.2+build1-0ubuntu0.12.04.1
released
oneiric
Fixed 19.0.2+build1-0ubuntu0.11.10.1
released
lucid
Fixed 19.0.2+build1-0ubuntu0.10.04.1
released
hardy
ignored
seamonkey
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
ignored
lucid
ignored
hardy
ignored
thunderbird
saucy
Fixed 17.0.4+build1-0ubuntu1
released
raring
Fixed 17.0.4+build1-0ubuntu1
released
quantal
Fixed 17.0.4+build1-0ubuntu0.12.10.1
released
precise
Fixed 17.0.4+build1-0ubuntu0.12.04.1
released
oneiric
Fixed 17.0.4+build1-0ubuntu0.11.10.1
released
lucid
Fixed 17.0.4+build1-0ubuntu0.10.04.1
released
hardy
ignored
xulrunner-1.9.2
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
dne
lucid
ignored
hardy
ignored
xulrunner-2.0
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
dne
lucid
dne
hardy
dne
Common Weakness Enumeration
References
http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00010.html
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00023.html
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00025.html
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00026.html
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00028.html
http://rhn.redhat.com/errata/RHSA-2013-0614.html
http://rhn.redhat.com/errata/RHSA-2013-0627.html
http://twitter.com/VUPEN/statuses/309505403631325184
http://twitter.com/thezdi/statuses/309484730506698752
http://www.debian.org/security/2013/dsa-2699
http://www.mozilla.org/security/announce/2013/mfsa2013-29.html
http://www.securityfocus.com/bid/58391
http://www.ubuntu.com/usn/USN-1758-1
https://bugzilla.mozilla.org/show_bug.cgi?id=848644
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16737
http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00010.html
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00023.html
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00025.html
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00026.html
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00028.html
http://rhn.redhat.com/errata/RHSA-2013-0614.html
http://rhn.redhat.com/errata/RHSA-2013-0627.html
http://twitter.com/VUPEN/statuses/309505403631325184
http://twitter.com/thezdi/statuses/309484730506698752
http://www.debian.org/security/2013/dsa-2699
http://www.mozilla.org/security/announce/2013/mfsa2013-29.html
http://www.securityfocus.com/bid/58391
http://www.ubuntu.com/usn/USN-1758-1
https://bugzilla.mozilla.org/show_bug.cgi?id=848644
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16737