CVEvulnerability
CVE-2013-5597
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-10-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving a state-change event during an update of the offline cache.
Affected configurations
• mozilla thunderbird esr 17.0
• mozilla thunderbird esr 17.0.1
• mozilla thunderbird esr 17.0.2
• mozilla thunderbird esr 17.0.3
• mozilla thunderbird esr 17.0.4
• mozilla thunderbird esr 17.0.5
• mozilla thunderbird esr 17.0.6
• mozilla thunderbird esr 17.0.7
• mozilla thunderbird esr 17.0.8
• mozilla thunderbird esr 17.0.9
• mozilla thunderbird (<= 24.0.1)
• mozilla thunderbird 17.0
• mozilla thunderbird 17.0.1
• mozilla thunderbird 17.0.2
• mozilla thunderbird 17.0.3
• mozilla thunderbird 17.0.4
• mozilla thunderbird 17.0.5
• mozilla thunderbird 17.0.6
• mozilla thunderbird 17.0.7
• mozilla thunderbird 17.0.8
• mozilla thunderbird 24.0
• mozilla firefox 17.0
• mozilla firefox 17.0.1
• mozilla firefox 17.0.2
• mozilla firefox 17.0.3
• mozilla firefox 17.0.4
• mozilla firefox 17.0.5
• mozilla firefox 17.0.6
• mozilla firefox 17.0.7
• mozilla firefox 17.0.8
• mozilla firefox 17.0.9
• mozilla firefox 24.0
• mozilla firefox 24.0.1
• mozilla firefox 24.0.2
• mozilla firefox (<= 24.0)
• mozilla firefox 19.0
• mozilla firefox 19.0.1
• mozilla firefox 19.0.2
• mozilla firefox 20.0
• mozilla firefox 20.0.1
• mozilla firefox 21.0
• mozilla firefox 22.0
• mozilla firefox 23.0
• mozilla firefox 23.0.1
• mozilla seamonkey (<= 2.22)
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla seamonkey 2.0.4
• mozilla seamonkey 2.0.5
• mozilla seamonkey 2.0.6
• mozilla seamonkey 2.0.7
• mozilla seamonkey 2.0.8
• mozilla seamonkey 2.0.9
• mozilla seamonkey 2.0.10
• mozilla seamonkey 2.0.11
• mozilla seamonkey 2.0.12
• mozilla seamonkey 2.0.13
• mozilla seamonkey 2.0.14
… and 23 more
References
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2013-1476.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1480.html rhn.redhat.com
- http://www.debian.org/security/2013/dsa-2788 www.debian.org
- http://www.debian.org/security/2013/dsa-2797 www.debian.org
- http://www.mozilla.org/security/announce/2013/mfsa2013-98.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=918864 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19277 oval.cisecurity.org
- https://security.gentoo.org/glsa/201504-01 security.gentoo.org
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2013-1476.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1480.html rhn.redhat.com
- http://www.debian.org/security/2013/dsa-2788 www.debian.org
- http://www.debian.org/security/2013/dsa-2797 www.debian.org
- http://www.mozilla.org/security/announce/2013/mfsa2013-98.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=918864 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19277 oval.cisecurity.org
- https://security.gentoo.org/glsa/201504-01 security.gentoo.org