Lucene search
Mozilla FoundationMFSA2013-05HistoryJan 08, 2013 - 12:00 a.m.
Use-after-free when displaying table with many columns and column groups — Mozilla
2013-01-0800:00:00
Mozilla Foundation
www.mozilla.org
13
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.019 Low
EPSS
Percentile
88.5%
Using the Address Sanitizer tool, security researcher Atte Kettunen from OUSPG discovered that the combination of large numbers of columns and column groups in a table could cause the array containing the columns during rendering to overwrite itself. This can lead to a user-after-free causing a potentially exploitable crash.
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox | lt | 18 | |
| firefox esr | lt | 10.0.12 | |
| firefox esr | lt | 17.0.2 | |
| seamonkey | lt | 2.15 | |
| thunderbird | lt | 17.0.2 | |
| thunderbird esr | lt | 10.0.12 | |
| thunderbird esr | lt | 17.0.2 |
Related
cve
cve
CVE-2013-0744
2013-01-13 20:55:00
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 08:53:16
Memory Corruption
2019-05-02 04:45:41
Out-Of-Bounds Read
2019-05-02 04:45:40
ubuntucve
ubuntucve
CVE-2013-0744
2013-01-09 00:00:00
prion
prion
Design/Logic Flaw
2013-01-13 20:55:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-05) - Linux
2021-11-11 00:00:00
Mozilla Products Multiple Vulnerabilities (Jan 2013) - Windows
2013-01-16 00:00:00
Mozilla Products Multiple Vulnerabilities January13 (Mac OS X)
2013-01-16 00:00:00
cvelist
cvelist
CVE-2013-0744
2013-01-13 20:00:00
nessus
nessus
Oracle Linux 6 : thunderbird (ELSA-2013-0145)
2013-07-12 00:00:00
CentOS 5 / 6 : thunderbird (CESA-2013:0145)
2013-01-09 00:00:00
redhat
redhat
(RHSA-2013:0144) Critical: firefox security update
2013-01-08 00:00:00
(RHSA-2013:0145) Critical: thunderbird security update
2013-01-08 00:00:00
centos
centos
firefox, xulrunner security update
2013-01-09 05:51:05
thunderbird security update
2013-01-09 05:51:41
oraclelinux
oraclelinux
firefox security update
2013-01-08 00:00:00
thunderbird security update
2013-01-08 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2013-01-18 19:04:49
Security update for Mozilla Firefox (important)
2013-02-18 18:04:29
Security update for MozillaFirefox (important)
2013-02-13 23:04:32
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-01-08 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-01-10 00:00:00
ibm
ibm
ubuntu
ubuntu
Thunderbird vulnerabilities
2013-01-09 00:00:00
Firefox regression
2013-01-22 00:00:00
Firefox regression
2013-02-05 00:00:00
kitploit
kitploit
Radamsa - A General-Purpose Fuzzer
2024-03-25 11:30:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-09-27 00:00:00
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.019 Low
EPSS
Percentile
88.5%
Related for MFSA2013-05