Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2013-5618

Опубликовано: 11 дек. 2013
Источник: debian
EPSS Низкий

Описание

Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code by triggering improper garbage collection.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
iceweaselfixed24.2.0esr-1package
icedovefixed24.2.0-1package
iceaperemovedpackage
iceweaselend-of-lifesqueezepackage
iceapeend-of-lifewheezypackage
icedoveend-of-lifesqueezepackage
iceapeend-of-lifesqueezepackage

EPSS

Процентиль: 91%
0.06456
Низкий

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 11 лет назад

Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code by triggering improper garbage collection.

redhat
больше 11 лет назад

Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code by triggering improper garbage collection.

CVSS3: 9.8
nvd
больше 11 лет назад

Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code by triggering improper garbage collection.

CVSS3: 9.8
github
около 3 лет назад

Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code by triggering improper garbage collection.

oracle-oval
больше 11 лет назад

ELSA-2013-1823: thunderbird security update (IMPORTANT)

EPSS

Процентиль: 91%
0.06456
Низкий