Design/Logic Flaw

2013-01-1320:55:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.019 Low

EPSS

Percentile

88.2%

JSON

Use-after-free vulnerability in the TableBackgroundPainter::TableBackgroundData::Destroy function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an HTML document with a table containing many columns and column groups.

CPENameOperatorVersion
ubuntu_linuxeq11.10
ubuntu_linuxeq12.10
ubuntu_linuxeq12.04
ubuntu_linuxeq10.04
firefoxlt18.0
firefox_esrge17.0
firefox_esrlt17.0.2
firefox_esrge10.0
firefox_esrlt10.0.12
seamonkeylt2.15

Name	Operator	Version
ubuntu_linux	eq	11.10
ubuntu_linux	eq	12.10
ubuntu_linux	eq	12.04
ubuntu_linux	eq	10.04
firefox	lt	18.0
firefox_esr	ge	17.0
firefox_esr	lt	17.0.2
firefox_esr	ge	10.0
firefox_esr	lt	10.0.12
seamonkey	lt	2.15