Lucene search
Mozilla FoundationMFSA2013-80HistorySep 17, 2013 - 12:00 a.m.
NativeKey continues handling key messages after widget is destroyed — Mozilla
2013-09-1700:00:00
Mozilla Foundation
www.mozilla.org
17
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.036 Low
EPSS
Percentile
91.7%
Mozilla developer Masayuki Nakano discovered that the NativeKey widget continues handling key messages even when it is destroyed by dispatched event listeners. This could result in some key events being applied to other objects or plugins if the widget memory is reallocated to them, leading to a non-exploitable crash.
Affected configurations
Node
mozillafirefoxRange<24
ORmozillaseamonkeyRange<2.21
ORmozillathunderbirdRange<24
Related
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-80) - Linux
2021-11-11 00:00:00
Mozilla Thunderbird Multiple Vulnerabilities-01 (Sep 2013) - Mac OS X
2013-09-24 00:00:00
Mozilla Thunderbird Multiple Vulnerabilities-01 (Sep 2013) - Windows
2013-09-24 00:00:00
nvd
nvd
CVE-2013-1723
2013-09-18 10:08:24
prion
prion
Memory corruption
2013-09-18 10:08:00
cve
cve
CVE-2013-1723
2013-09-18 10:08:24
cvelist
cvelist
CVE-2013-1723
2013-09-18 10:00:00
nessus
nessus
openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2013:1495-1)
2014-06-13 00:00:00
Mozilla Firefox ESR < 17.0.9 Multiple Vulnerabilities
2019-11-06 00:00:00
Mozilla Thunderbird < 24.0
2013-09-18 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-08-17 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-10-01 00:00:00
mageia
mageia
Updated iceape packages fix many vulnerabilities
2013-11-21 00:16:49
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-09-27 00:00:00
suse
suse
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.036 Low
EPSS
Percentile
91.7%
Related for MFSA2013-80