Lucene search
HistoryOct 30, 2013 - 10:55 a.m.
CVE-2013-5597
cve-2013-5597
use-after-free
vulnerability
mozilla
firefox
remote attackers
arbitrary code
denial of service
heap memory corruption
nvd
7.7 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.073 Low
EPSS
Percentile
94.1%
Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving a state-change event during an update of the offline cache.
Affected configurations
Node
mozillathunderbird_esrMatch17.0
ORmozillathunderbird_esrMatch17.0.1
ORmozillathunderbird_esrMatch17.0.2
ORmozillathunderbird_esrMatch17.0.3
ORmozillathunderbird_esrMatch17.0.4
ORmozillathunderbird_esrMatch17.0.5
ORmozillathunderbird_esrMatch17.0.6
ORmozillathunderbird_esrMatch17.0.7
ORmozillathunderbird_esrMatch17.0.8
ORmozillathunderbird_esrMatch17.0.9
Node
mozillathunderbirdRange≤24.0.1
ORmozillathunderbirdMatch17.0
ORmozillathunderbirdMatch17.0.1
ORmozillathunderbirdMatch17.0.2
ORmozillathunderbirdMatch17.0.3
ORmozillathunderbirdMatch17.0.4
ORmozillathunderbirdMatch17.0.5
ORmozillathunderbirdMatch17.0.6
ORmozillathunderbirdMatch17.0.7
ORmozillathunderbirdMatch17.0.8
ORmozillathunderbirdMatch24.0
ORmozillathunderbird_esrMatch17.0.9
Node
mozillafirefox_esrMatch17.0
ORmozillafirefox_esrMatch17.0.1
ORmozillafirefox_esrMatch17.0.2
ORmozillafirefox_esrMatch17.0.3
ORmozillafirefox_esrMatch17.0.4
ORmozillafirefox_esrMatch17.0.5
ORmozillafirefox_esrMatch17.0.6
ORmozillafirefox_esrMatch17.0.7
ORmozillafirefox_esrMatch17.0.8
ORmozillafirefox_esrMatch17.0.9
ORmozillafirefox_esrMatch24.0
ORmozillafirefox_esrMatch24.0.1
ORmozillafirefox_esrMatch24.0.2
Node
mozillafirefoxRange≤24.0
ORmozillafirefoxMatch19.0
ORmozillafirefoxMatch19.0.1
ORmozillafirefoxMatch19.0.2
ORmozillafirefoxMatch20.0
ORmozillafirefoxMatch20.0.1
ORmozillafirefoxMatch21.0
ORmozillafirefoxMatch22.0
ORmozillafirefoxMatch23.0
ORmozillafirefoxMatch23.0.1
Node
mozillaseamonkeyRange≤2.22beta2
ORmozillaseamonkeyMatch2.0
ORmozillaseamonkeyMatch2.0alpha_1
ORmozillaseamonkeyMatch2.0alpha_2
ORmozillaseamonkeyMatch2.0alpha_3
ORmozillaseamonkeyMatch2.0beta_1
ORmozillaseamonkeyMatch2.0beta_2
ORmozillaseamonkeyMatch2.0rc1
ORmozillaseamonkeyMatch2.0rc2
ORmozillaseamonkeyMatch2.0.1
ORmozillaseamonkeyMatch2.0.2
ORmozillaseamonkeyMatch2.0.3
ORmozillaseamonkeyMatch2.0.4
ORmozillaseamonkeyMatch2.0.5
ORmozillaseamonkeyMatch2.0.6
ORmozillaseamonkeyMatch2.0.7
ORmozillaseamonkeyMatch2.0.8
ORmozillaseamonkeyMatch2.0.9
ORmozillaseamonkeyMatch2.0.10
ORmozillaseamonkeyMatch2.0.11
ORmozillaseamonkeyMatch2.0.12
ORmozillaseamonkeyMatch2.0.13
ORmozillaseamonkeyMatch2.0.14
ORmozillaseamonkeyMatch2.1
ORmozillaseamonkeyMatch2.1alpha1
ORmozillaseamonkeyMatch2.1alpha2
ORmozillaseamonkeyMatch2.1alpha3
ORmozillaseamonkeyMatch2.1beta1
ORmozillaseamonkeyMatch2.1beta2
ORmozillaseamonkeyMatch2.1beta3
ORmozillaseamonkeyMatch2.1rc1
ORmozillaseamonkeyMatch2.1rc2
ORmozillaseamonkeyMatch2.10
ORmozillaseamonkeyMatch2.10beta1
ORmozillaseamonkeyMatch2.10beta2
ORmozillaseamonkeyMatch2.10beta3
ORmozillaseamonkeyMatch2.10.1
ORmozillaseamonkeyMatch2.11
ORmozillaseamonkeyMatch2.11beta1
ORmozillaseamonkeyMatch2.11beta2
ORmozillaseamonkeyMatch2.11beta3
ORmozillaseamonkeyMatch2.11beta4
ORmozillaseamonkeyMatch2.11beta5
ORmozillaseamonkeyMatch2.11beta6
ORmozillaseamonkeyMatch2.12
ORmozillaseamonkeyMatch2.12beta1
ORmozillaseamonkeyMatch2.12beta2
ORmozillaseamonkeyMatch2.12beta3
ORmozillaseamonkeyMatch2.12beta4
ORmozillaseamonkeyMatch2.12beta5
ORmozillaseamonkeyMatch2.12beta6
ORmozillaseamonkeyMatch2.12.1
ORmozillaseamonkeyMatch2.13
ORmozillaseamonkeyMatch2.13beta1
ORmozillaseamonkeyMatch2.13beta2
ORmozillaseamonkeyMatch2.13beta3
ORmozillaseamonkeyMatch2.13beta4
ORmozillaseamonkeyMatch2.13beta5
ORmozillaseamonkeyMatch2.13beta6
ORmozillaseamonkeyMatch2.13.1
ORmozillaseamonkeyMatch2.13.2
ORmozillaseamonkeyMatch2.14
ORmozillaseamonkeyMatch2.14beta1
ORmozillaseamonkeyMatch2.14beta2
ORmozillaseamonkeyMatch2.14beta3
ORmozillaseamonkeyMatch2.14beta4
ORmozillaseamonkeyMatch2.14beta5
ORmozillaseamonkeyMatch2.15
ORmozillaseamonkeyMatch2.15beta1
ORmozillaseamonkeyMatch2.15beta2
ORmozillaseamonkeyMatch2.15beta3
ORmozillaseamonkeyMatch2.15beta4
ORmozillaseamonkeyMatch2.15beta5
ORmozillaseamonkeyMatch2.15beta6
ORmozillaseamonkeyMatch2.15.1
ORmozillaseamonkeyMatch2.15.2
ORmozillaseamonkeyMatch2.16
ORmozillaseamonkeyMatch2.16beta1
ORmozillaseamonkeyMatch2.16beta2
ORmozillaseamonkeyMatch2.16beta3
ORmozillaseamonkeyMatch2.16beta4
ORmozillaseamonkeyMatch2.16beta5
ORmozillaseamonkeyMatch2.16.1
ORmozillaseamonkeyMatch2.16.2
ORmozillaseamonkeyMatch2.17
ORmozillaseamonkeyMatch2.17beta1
ORmozillaseamonkeyMatch2.17beta2
ORmozillaseamonkeyMatch2.17beta3
ORmozillaseamonkeyMatch2.17beta4
ORmozillaseamonkeyMatch2.17.1
ORmozillaseamonkeyMatch2.18beta1
ORmozillaseamonkeyMatch2.18beta2
ORmozillaseamonkeyMatch2.18beta3
ORmozillaseamonkeyMatch2.18beta4
ORmozillaseamonkeyMatch2.19
ORmozillaseamonkeyMatch2.19beta1
ORmozillaseamonkeyMatch2.19beta2
ORmozillaseamonkeyMatch2.20
ORmozillaseamonkeyMatch2.20beta1
ORmozillaseamonkeyMatch2.20beta2
ORmozillaseamonkeyMatch2.20beta3
ORmozillaseamonkeyMatch2.21beta1
ORmozillaseamonkeyMatch2.21beta2
ORmozillaseamonkeyMatch2.22beta1
References
lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html
lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html
lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html
rhn.redhat.com/errata/RHSA-2013-1476.html
rhn.redhat.com/errata/RHSA-2013-1480.html
www.debian.org/security/2013/dsa-2788
www.debian.org/security/2013/dsa-2797
www.mozilla.org/security/announce/2013/mfsa2013-98.html
bugzilla.mozilla.org/show_bug.cgi?id=918864
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19277
security.gentoo.org/glsa/201504-01
Related
ubuntucve
ubuntucve
CVE-2013-5597
2013-10-29 00:00:00
prion
prion
Design/Logic Flaw
2013-10-30 10:55:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-98) - Linux
2021-11-11 00:00:00
CentOS Update for firefox CESA-2013:1476 centos6
2013-11-08 00:00:00
Mozilla Thunderbird ESR Multiple Vulnerabilities-01 (Nov 2013) - Windows
2013-11-07 00:00:00
nvd
nvd
CVE-2013-5597
2013-10-30 10:55:04
mozilla
mozilla
Use-after-free when updating offline cache — Mozilla
2013-10-29 00:00:00
cvelist
cvelist
CVE-2013-5597
2013-10-30 10:00:00
nessus
nessus
Debian DSA-2788-1 : iceweasel - several vulnerabilities
2013-11-01 00:00:00
Scientific Linux Security Update : thunderbird on SL5.x, SL6.x i386/x86_64 (20131030)
2013-10-31 00:00:00
CentOS 5 / 6 : thunderbird (CESA-2013:1480)
2013-10-31 00:00:00
veracode
veracode
Buffer Overflow
2019-05-02 04:56:49
Memory Corruption
2019-05-02 04:56:51
Denial Of Service (DOS)
2019-05-02 04:56:49
oraclelinux
oraclelinux
firefox security update
2013-10-29 00:00:00
thunderbird security update
2013-10-30 00:00:00
debian
debian
[SECURITY] [DSA 2788-1] iceweasel security update
2013-10-31 08:27:05
[SECURITY] [DSA 2797-1] icedove security update
2013-11-13 21:45:22
redhat
redhat
(RHSA-2013:1480) Important: thunderbird security update
2013-10-30 00:00:00
(RHSA-2013:1476) Critical: firefox security update
2013-10-29 00:00:00
centos
centos
thunderbird security update
2013-10-30 22:19:56
firefox, xulrunner security update
2013-10-30 04:12:01
mageia
mageia
Updated thunderbird package fixes security vulnerabilities
2013-11-18 18:39:59
Updated firefox & related packages fix multiple security vulnerabilities
2013-11-09 22:55:13
Updated iceape packages fix many vulnerabilities
2013-11-21 00:16:49
suse
suse
Security update for Mozilla Firefox (important)
2013-11-15 03:04:14
Mozilla updates 10/2013 (important)
2013-11-07 11:04:15
Mozilla Suite: Update to October 2013 release (important)
2013-11-07 10:04:11
ubuntu
ubuntu
Thunderbird vulnerabilities
2013-10-31 00:00:00
Firefox vulnerabilities
2013-10-29 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-11-05 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-10-29 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00
7.7 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.073 Low
EPSS
Percentile
94.1%
Related for CVE-2013-5597