CVE Vulnerabilities

CVE-2013-1679

Published: May 16, 2013 | Modified: Sep 19, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
6.8 CRITICAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu
MEDIUM

Use-after-free vulnerability in the mozilla::plugins::child::_geturlnotify function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

Affected Software

Name Vendor Start Version End Version
Firefox Mozilla * 20.0.1 (including)
Firefox Mozilla 19.0 (including) 19.0 (including)
Firefox Mozilla 19.0.1 (including) 19.0.1 (including)
Firefox Mozilla 19.0.2 (including) 19.0.2 (including)
Firefox Mozilla 20.0 (including) 20.0 (including)
Red Hat Enterprise Linux 5 RedHat thunderbird-0:17.0.6-1.el5_9 *
Red Hat Enterprise Linux 5 RedHat firefox-0:17.0.6-1.el5_9 *
Red Hat Enterprise Linux 5 RedHat xulrunner-0:17.0.6-1.el5_9 *
Red Hat Enterprise Linux 6 RedHat firefox-0:17.0.6-1.el6_4 *
Red Hat Enterprise Linux 6 RedHat xulrunner-0:17.0.6-2.el6_4 *
Red Hat Enterprise Linux 6 RedHat thunderbird-0:17.0.6-2.el6_4 *
Firefox Ubuntu devel *
Firefox Ubuntu lucid *
Firefox Ubuntu precise *
Firefox Ubuntu quantal *
Firefox Ubuntu raring *
Firefox Ubuntu upstream *
Seamonkey Ubuntu lucid *
Thunderbird Ubuntu devel *
Thunderbird Ubuntu lucid *
Thunderbird Ubuntu precise *
Thunderbird Ubuntu quantal *
Thunderbird Ubuntu raring *
Thunderbird Ubuntu upstream *
Xulrunner-1.9.2 Ubuntu lucid *

References