CVEvulnerability

CVE-2013-5603

10.0 HIGH Published 2013-10-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-10-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Use-after-free vulnerability in the nsContentUtils::ContentIsHostIncludingDescendantOf function in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving HTML document templates.

Affected configurations

• mozilla thunderbird (<= 24.0.1) • mozilla thunderbird 17.0 • mozilla thunderbird 17.0.1 • mozilla thunderbird 17.0.2 • mozilla thunderbird 17.0.3 • mozilla thunderbird 17.0.4 • mozilla thunderbird 17.0.5 • mozilla thunderbird 17.0.6 • mozilla thunderbird 17.0.7 • mozilla thunderbird 17.0.8 • mozilla thunderbird 24.0 • mozilla thunderbird esr 17.0.9 • mozilla firefox 24.0 • mozilla firefox 24.0.1 • mozilla firefox 24.0.2 • mozilla seamonkey (<= 2.22) • mozilla seamonkey 2.0 • mozilla seamonkey 2.0.1 • mozilla seamonkey 2.0.2 • mozilla seamonkey 2.0.3 • mozilla seamonkey 2.0.4 • mozilla seamonkey 2.0.5 • mozilla seamonkey 2.0.6 • mozilla seamonkey 2.0.7 • mozilla seamonkey 2.0.8 • mozilla seamonkey 2.0.9 • mozilla seamonkey 2.0.10 • mozilla seamonkey 2.0.11 • mozilla seamonkey 2.0.12 • mozilla seamonkey 2.0.13 • mozilla seamonkey 2.0.14 • mozilla seamonkey 2.1 • mozilla seamonkey 2.10 • mozilla seamonkey 2.10.1 • mozilla seamonkey 2.11 • mozilla seamonkey 2.12 • mozilla seamonkey 2.12.1 • mozilla seamonkey 2.13 • mozilla seamonkey 2.13.1 • mozilla seamonkey 2.13.2 • mozilla seamonkey 2.14 • mozilla seamonkey 2.15 • mozilla seamonkey 2.15.1 • mozilla seamonkey 2.15.2 • mozilla seamonkey 2.16 • mozilla seamonkey 2.16.1 • mozilla seamonkey 2.16.2 • mozilla seamonkey 2.17 • mozilla seamonkey 2.17.1 • mozilla seamonkey 2.18 • mozilla seamonkey 2.19 • mozilla seamonkey 2.20 • mozilla seamonkey 2.21 • mozilla seamonkey 2.22 • mozilla firefox (<= 24.0) • mozilla firefox 19.0 • mozilla firefox 19.0.1 • mozilla firefox 19.0.2 • mozilla firefox 20.0 • mozilla firefox 20.0.1 … and 4 more

References