CVE Vulnerabilities

CVE-2013-0775

Use After Free

Published: Feb 19, 2013 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
6.8 CRITICAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu
MEDIUM

Use-after-free vulnerability in the nsImageLoadingContent::OnStopContainer function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code via crafted web script.

Weakness

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory “belongs” to the code that operates on the new pointer.

Affected Software

Name Vendor Start Version End Version
Firefox Mozilla * 17.0.3 (excluding)
Firefox Mozilla * 19.0 (excluding)
Seamonkey Mozilla * 2.16 (excluding)
Thunderbird Mozilla * 17.0.3 (excluding)
Thunderbird_esr Mozilla * 17.0.3 (excluding)
Red Hat Enterprise Linux 5 RedHat thunderbird-0:17.0.3-1.el5_9 *
Red Hat Enterprise Linux 5 RedHat devhelp-0:0.12-23.el5_9 *
Red Hat Enterprise Linux 5 RedHat firefox-0:17.0.3-1.el5_9 *
Red Hat Enterprise Linux 5 RedHat xulrunner-0:17.0.3-1.el5_9 *
Red Hat Enterprise Linux 5 RedHat yelp-0:2.16.0-30.el5_9 *
Red Hat Enterprise Linux 6 RedHat firefox-0:17.0.3-1.el6_3 *
Red Hat Enterprise Linux 6 RedHat libproxy-0:0.3.0-4.el6_3 *
Red Hat Enterprise Linux 6 RedHat xulrunner-0:17.0.3-1.el6_3 *
Red Hat Enterprise Linux 6 RedHat yelp-0:2.28.1-17.el6_3 *
Red Hat Enterprise Linux 6 RedHat thunderbird-0:17.0.3-1.el6_3 *
Firefox Ubuntu hardy *
Firefox Ubuntu lucid *
Firefox Ubuntu oneiric *
Firefox Ubuntu precise *
Firefox Ubuntu quantal *
Firefox Ubuntu upstream *
Seamonkey Ubuntu hardy *
Seamonkey Ubuntu lucid *
Seamonkey Ubuntu oneiric *
Seamonkey Ubuntu upstream *
Thunderbird Ubuntu hardy *
Thunderbird Ubuntu lucid *
Thunderbird Ubuntu oneiric *
Thunderbird Ubuntu precise *
Thunderbird Ubuntu quantal *
Thunderbird Ubuntu upstream *
Xulrunner-1.9.2 Ubuntu hardy *
Xulrunner-1.9.2 Ubuntu lucid *

Potential Mitigations

References