CVE-2013-1684

Severity

93%

Complexity

86%

Confidentiality

165%

Use-after-free vulnerability in the mozilla::dom::HTMLMediaElement::LookupMediaElementURITable function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site.

Use-after-free vulnerability in the mozilla::dom::HTMLMediaElement::LookupMediaElementURITable function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site.

CVSS 2.0 Base Score 9.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C).

Overview

Type

Mozilla

First reported 11 years ago

2013-06-26 03:19:00

Last updated 7 years ago

2017-09-19 01:36:00

Affected Software

Mozilla Firefox 19.0

19.0

Mozilla Firefox 19.0.1

19.0.1

Mozilla Firefox 19.0.2

19.0.2

Mozilla Firefox 20.0

20.0

Mozilla Firefox 20.0.1

20.0.1

Mozilla Firefox

Mozilla Firefox Extended Support Release (ESR) 17.0

17.0

Mozilla Firefox Extended Support Release (ESR) 17.0.1

17.0.1

Mozilla Firefox Extended Support Release (ESR) 17.0.2

17.0.2

Mozilla Firefox Extended Support Release (ESR) 17.0.3

17.0.3

Mozilla Firefox Extended Support Release (ESR) 17.0.4

17.0.4

Mozilla Firefox Extended Support Release (ESR) 17.0.5

17.0.5

Mozilla Firefox Extended Support Release (ESR) 17.0.6

17.0.6

Mozilla Thunderbird 17.0

17.0

Mozilla Thunderbird 17.0.2

17.0.2

Mozilla Thunderbird 17.0.3

17.0.3

Mozilla Thunderbird 17.0.4

17.0.4

Mozilla Thunderbird 17.0.5

17.0.5

Mozilla Thunderbird

Mozilla Thunderbird Extended Support Release (ESR) 17.0

17.0

Mozilla Thunderbird Extended Support Release (ESR) 17.0.2

17.0.2

Mozilla Thunderbird Extended Support Release (ESR) 17.0.3

17.0.3

Mozilla Thunderbird Extended Support Release (ESR) 17.0.4

17.0.4

Mozilla Thunderbird Extended Support Release (ESR) 17.0.5

17.0.5

Mozilla Thunderbird Extended Support Release (ESR) 17.0.6

17.0.6

References

openSUSE-SU-2013:1140

openSUSE-SU-2013:1141

openSUSE-SU-2013:1142

openSUSE-SU-2013:1143

SUSE-SU-2013:1152

SUSE-SU-2013:1153

RHSA-2013:0981

RHSA-2013:0982

DSA-2716

DSA-2720

http://www.mozilla.org/security/announce/2013/mfsa2013-50.html

Vendor Advisory

60766

USN-1890-1

USN-1891-1

https://bugzilla.mozilla.org/show_bug.cgi?id=865537

oval:org.mitre.oval:def:16604

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.