Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2013-5603

Published: 30/10/2013 Updated: 30/10/2018
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Mozilla

Vulnerability Summary

Use-after-free vulnerability in the nsContentUtils::ContentIsHostIncludingDescendantOf function in Mozilla Firefox prior to 25.0, Firefox ESR 24.x prior to 24.1, Thunderbird prior to 24.1, and SeaMonkey prior to 2.22 allows remote malicious users to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving HTML document templates.

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla thunderbird

mozilla thunderbird 17.0

mozilla thunderbird 17.0.7

mozilla thunderbird 17.0.8

mozilla thunderbird 17.0.3

mozilla thunderbird 17.0.4

mozilla thunderbird 17.0.1

mozilla thunderbird 17.0.2

mozilla thunderbird esr 17.0.9

mozilla thunderbird 24.0

mozilla thunderbird 17.0.5

mozilla thunderbird 17.0.6

mozilla firefox esr 24.0

mozilla firefox esr 24.0.1

mozilla firefox esr 24.0.2

mozilla seamonkey 2.21

mozilla seamonkey 2.14

mozilla seamonkey 2.13.2

mozilla seamonkey 2.13

mozilla seamonkey 2.12

mozilla seamonkey 2.11

mozilla seamonkey 2.10

mozilla seamonkey 2.1

mozilla seamonkey 2.0.2

mozilla seamonkey 2.0.14

mozilla seamonkey 2.0

mozilla seamonkey 2.20

mozilla seamonkey 2.18

mozilla seamonkey 2.17.1

mozilla seamonkey 2.16.1

mozilla seamonkey 2.16

mozilla seamonkey 2.15.1

mozilla seamonkey 2.15

mozilla seamonkey 2.22

mozilla seamonkey

mozilla seamonkey 2.13.1

mozilla seamonkey 2.12.1

mozilla seamonkey 2.0.5

mozilla seamonkey 2.0.4

mozilla seamonkey 2.0.3

mozilla seamonkey 2.0.1

mozilla seamonkey 2.17

mozilla seamonkey 2.16.2

mozilla seamonkey 2.15.2

mozilla seamonkey 2.10.1

mozilla seamonkey 2.0.7

mozilla seamonkey 2.0.6

mozilla seamonkey 2.0.11

mozilla seamonkey 2.0.10

mozilla seamonkey 2.19

mozilla seamonkey 2.0.9

mozilla seamonkey 2.0.8

mozilla seamonkey 2.0.13

mozilla seamonkey 2.0.12

mozilla firefox

mozilla firefox 19.0.2

mozilla firefox 23.0.1

mozilla firefox 23.0

mozilla firefox 20.0.1

mozilla firefox 20.0

mozilla firefox 22.0

mozilla firefox 21.0

mozilla firefox 19.0.1

mozilla firefox 19.0

Vendor Advisories

Ubuntu Security Notice: firefox vulnerabilities
Firefox could be made to crash or run programs as your login if it opened a malicious website ...
Ubuntu Security Notice: thunderbird vulnerabilities
Several security issues were fixed in Thunderbird ...
Mozilla: Use-after-free in HTML document templates
Mozilla Foundation Security Advisory 2013-102 Use-after-free in HTML document templates Announced October 29, 2013 Reporter Abhishek Arya Impact Critical Products Firefox, Firefox ESR, SeaMonkey, Thunderbird Fixed in ...

References

NVD-CWE-Otherhttp://www.mozilla.org/security/announce/2013/mfsa2013-102.htmlhttps://bugzilla.mozilla.org/show_bug.cgi?id=916404http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.htmlhttps://security.gentoo.org/glsa/201504-01https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19302https://usn.ubuntu.com/2009-1/https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-2907hardcodedinjectCVE-2024-20359CVE-2024-2467CVE-2024-4077CVE-2024-22391cameraCVE-2024-20353
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook