CVE-2013-1674

Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code via vectors involving an onresize event during the playing of a video...

CVE-2013-1680

Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service heap memory...

Mozilla Firefox < 21.0 Multiple Vulnerabilities

Binary data 6828.prm...

CVE-2013-1309

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1308 and...

CVE-2013-1312

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability."...

Design/Logic Flaw

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability."...

CVE-2013-1312

CVE-2013-1312 affects Microsoft Internet Explorer 9 and 10. The vulnerability is a use-after-free in mshtml/CDOMTextNode where an in-memory object that has been deleted is accessed via a crafted web page, leading to remote code execution. Exploitation requires the user to visit a malicious page o...

CVE-2013-1306

CVE-2013-1306 is a Use-After-Free vulnerability in Microsoft Internet Explorer 9 that could allow remote code execution when visiting a crafted site (distinct from CVE-2013-1313). The connected records indicate this issue has been exploited (e.g., Exploit-DB entry 40894) and that Microsoft MS13-0...

CVE-2013-1307

CVE-2013-1307 is a use-after-free vulnerability in Microsoft Internet Explorer 8 and 9. A crafted webpage that triggers access to a deleted object could allow remote code execution in the current user context. This entry is distinct from CVE-2013-0811. Public references indicate exploitation stat...

CVE-2013-1307

Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-0811...

CVE-2013-1309

CVE-2013-1309 corresponds to the Internet Explorer Use-After-Free vulnerability (MS13-037) affecting IE 6–10. The issue arises from use-after-free in memory handling (notably related to CDispNode/vgx.dll) when processing certain web content, enabling remote code execution via a crafted site. Publ...

CVE-2013-1311

CVE-2013-1311 is a use-after-free vulnerability in Microsoft Internet Explorer 8. The flaw is triggered when a crafted page causes a deleted object to be accessed, with the DOM textNode pointer corruption occurring after style computation and being overwritten when innerHTML on the parent is set....

CVE-2013-1674

Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code via vectors involving an onresize event during the playing of a video...

SuSE 11.2 Security Update : Linux kernel (SAT Patch Numbers 7667 / 7669 / 7675)

The SUSE Linux Enterprise 11 SP2 kernel has been updated to 3.0.74 fix various security issues and bugs : This update brings some features : - Updated HD-audio drivers for Nvidia/AMD HDMI and Haswell audio FATE314311 FATE313695 - Lustre enablement patches were added FATE314679. - SGI UV Ultraviol...

CVE-2013-1338

Microsoft Internet Explorer 6–10 is affected by use-after-free vulnerabilities (CVE-2013-1303, CVE-2013-1304, CVE-2013-1338) that allow remote code execution when visiting a crafted site that accesses deleted objects. The issues stem from use-after-free conditions in IE components (notably relate...

CVE-2013-1338

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1303 and...

Apple QuickTime ActiveX Control Clear Method Use After Free - Improved Performance (CVE-2012-3754)

A use-after-free vulnerability has been reported in Apple QuickTime's ActiveX control. The vulnerability is due to an error while handling a certain method. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted web page using Internet Explorer...

Design/Logic Flaw

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1303 and...

CVE-2013-1304

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1303 and...

Design/Logic Flaw

Use-after-free vulnerability in the extension bookmarks API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...