CVEvulnerability
CVE-2013-1738
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-09-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Use-after-free vulnerability in the JS_GetGlobalForScopeChain function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code by leveraging incorrect garbage collection in situations involving default compartments and frame-chain restoration.
Affected configurations
• mozilla seamonkey (<= 2.20)
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla seamonkey 2.0.4
• mozilla seamonkey 2.0.5
• mozilla seamonkey 2.0.6
• mozilla seamonkey 2.0.7
• mozilla seamonkey 2.0.8
• mozilla seamonkey 2.0.9
• mozilla seamonkey 2.0.10
• mozilla seamonkey 2.0.11
• mozilla seamonkey 2.0.12
• mozilla seamonkey 2.0.13
• mozilla seamonkey 2.0.14
• mozilla seamonkey 2.1
• mozilla seamonkey 2.10
• mozilla seamonkey 2.10.1
• mozilla seamonkey 2.11
• mozilla seamonkey 2.12
• mozilla seamonkey 2.12.1
• mozilla seamonkey 2.13
• mozilla seamonkey 2.13.1
• mozilla seamonkey 2.13.2
• mozilla seamonkey 2.14
• mozilla seamonkey 2.15
• mozilla seamonkey 2.15.1
• mozilla seamonkey 2.15.2
• mozilla seamonkey 2.16
• mozilla seamonkey 2.16.1
• mozilla seamonkey 2.16.2
• mozilla seamonkey 2.17
• mozilla seamonkey 2.17.1
• mozilla seamonkey 2.18
• mozilla seamonkey 2.19
• mozilla seamonkey 2.20
• mozilla thunderbird (<= 17.0.9)
• mozilla thunderbird 17.0
• mozilla thunderbird 17.0.1
• mozilla thunderbird 17.0.2
• mozilla thunderbird 17.0.3
• mozilla thunderbird 17.0.4
• mozilla thunderbird 17.0.5
• mozilla thunderbird 17.0.6
• mozilla thunderbird 17.0.7
• mozilla thunderbird 17.0.8
• mozilla firefox (<= 23.0.1)
• mozilla firefox 19.0
• mozilla firefox 19.0.1
• mozilla firefox 19.0.2
• mozilla firefox 20.0
• mozilla firefox 20.0.1
• mozilla firefox 21.0
• mozilla firefox 22.0
• mozilla firefox 23.0
Related
Weakness · not in database (1)
References
- http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html lists.opensuse.org
- http://www.mozilla.org/security/announce/2013/mfsa2013-92.html Vendor Advisory
- http://www.securityfocus.com/bid/62466 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1951-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1952-1 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=882897 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=887334 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18766 oval.cisecurity.org
- http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html lists.opensuse.org
- http://www.mozilla.org/security/announce/2013/mfsa2013-92.html Vendor Advisory
- http://www.securityfocus.com/bid/62466 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1951-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1952-1 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=882897 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=887334 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18766 oval.cisecurity.org