CVE-2013-0762

Description

Use-after-free vulnerability in the imgRequest::OnStopFrame function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
2.669

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Mozilla Firefox (x64) 17.3Windows
Multiple vulnerabilities affected in Mozilla Firefox ESR (x64) 17.0.1Windows
Multiple vulnerabilities affected in Mozilla Firefox ESR 17.0.1Windows
Multiple vulnerabilities affected in Mozilla Thunderbird 17.0Windows
Multiple vulnerabilities affected in Mozilla Thunderbird ESR 17.0Windows
Multiple vulnerabilities affected in Mozilla_Firefox 17.3Windows
Multiple vulnerabilities affected in SeaMonkey 2.9.1Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 10.0.11Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 17.0.1Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 17.99Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 10.0.11Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 17.0.1Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 17.99Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird ESR 17.0.1Windows
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (118.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (118.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (118.0.2)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac 17.0.2Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac 10.0.12Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 10.0.11Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 17.0.1Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 10.0.11Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 17.0.1Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 17.3Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 10.0.11Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 17.0-beta3Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 17.0.1Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.14-beta5Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac 17.0.2Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac 10.0.12Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac 10.0.11Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-343016Mozilla Firefox (x64) (132.0.2)
PATCH-310844Mozilla Firefox ESR (x64) (60.9.0)
PATCH-310843Mozilla Firefox ESR (60.9.0)
PATCH-315938Mozilla Thunderbird (68.12.0)
PATCH-343015Mozilla Firefox (132.0.2)
PATCH-341197SeaMonkey (2.53.19)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-612783Mozilla Firefox For Mac (145.0.1)
PATCH-612783Mozilla Firefox For Mac (145.0.1)
PATCH-612783Mozilla Firefox For Mac (145.0.1)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234