CVE-2013-1686

Use-after-free vulnerability in the mozilla::ResetDir function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
mozillaCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
VendorProductVersion
mozillafirefox
𝑥
≤ 21.0
mozillafirefox
19.0
mozillafirefox
19.0.1
mozillafirefox
19.0.2
mozillafirefox
20.0
mozillafirefox
20.0.1
mozillafirefox
17.0
mozillafirefox
17.0.1
mozillafirefox
17.0.2
mozillafirefox
17.0.3
mozillafirefox
17.0.4
mozillafirefox
17.0.5
mozillafirefox
17.0.6
mozillathunderbird
𝑥
≤ 17.0.6
mozillathunderbird
17.0
mozillathunderbird
17.0.1
mozillathunderbird
17.0.2
mozillathunderbird
17.0.3
mozillathunderbird
17.0.4
mozillathunderbird
17.0.5
mozillathunderbird_esr
17.0
mozillathunderbird_esr
17.0.1
mozillathunderbird_esr
17.0.2
mozillathunderbird_esr
17.0.3
mozillathunderbird_esr
17.0.4
mozillathunderbird_esr
17.0.5
mozillathunderbird_esr
17.0.6
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
raring
Fixed 22.0+build1-0ubuntu0.13.04.1
released
quantal
Fixed 22.0+build1-0ubuntu0.12.10.1
released
precise
Fixed 22.0+build1-0ubuntu0.12.04.1
released
lucid
ignored
seamonkey
raring
dne
quantal
dne
precise
dne
lucid
ignored
thunderbird
raring
Fixed 17.0.7+build1-0ubuntu0.13.04.1
released
quantal
Fixed 17.0.7+build1-0ubuntu0.12.10.1
released
precise
Fixed 17.0.7+build1-0ubuntu0.12.04.1
released
lucid
ignored
xulrunner-1.9.2
raring
dne
quantal
dne
precise
dne
lucid
ignored
Common Weakness Enumeration
References