CVE-2013-5597

Description

Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving a state-change event during an update of the offline cache.

Risk Information

Base Score
9.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
3.629

Associated Vulnerability

VulnerabilityOS Platform
Vulnerability CVE-2013-5590,CVE-2013-5595,CVE-2013-5597 are affected in Mozilla Firefox 24.0Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 17.0.4Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird ESR 17.0.4Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 17.0Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 17.0.1Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 17.0.2Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 17.0.3Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird ESR 17.0Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird ESR 17.0.1Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird ESR 17.0.2Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird ESR 17.0.3Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 17.0.5Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird ESR 17.0.5Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 19.0.1Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 19.0.2Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 20.0Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 20.0.1Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 23.0.1Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 19.0.1Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 19.0.2Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 20.0Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 20.0.1Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 23.0.1Windows
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (125.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (125.0.2)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (125.0.3)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac 24.1Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac 17.0.10Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.5Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.1Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.10Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.11Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.12Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.13Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.14Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.2Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.3Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.4Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.6Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.7Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.8Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.0.9Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.1Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.10Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.12.1Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.10.1Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.11Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.12Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.13Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.13.1Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.13.2Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 17.0.1Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 17.0.1Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 17.0.1Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 17.0.2Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 17.0.2Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 17.0.2Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.15.2Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 17.0Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 17.0.3Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 17.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 17.0.3Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 19.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 19.0.1Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 17.0Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 17.0.3Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.16Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 17.0.4Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 17.0.4Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 19.0.2Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 17.0.4Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.14Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.15Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.15.1Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.16.1Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.16.2Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.17Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 17.0.5Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 17.0.5Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 20.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 20.0.1Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 17.0.5Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 17.0.6Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 17.0.6Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 21.0Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 17.0.6Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 17.0.7Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 17.0.7Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 22.0Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 17.0.7Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.17.1Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.18Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.19Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.20Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 17.0.8Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 17.0.8Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 23.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 23.0.1Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 17.0.8Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 17.0.9Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 17.0.9Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 24.0Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 24.0.1Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 24.0.2Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 17.0.9Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 24.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 24.0.1Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 24.0.2Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 24.0Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 24.0.1Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.21Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.22Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.22-beta2Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac 24.1Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac 17.0.10Mac
(RHSA-2013:1476) Critical: firefox security update xulrunner-17.0.10-1.el5_10.i386.rpmLinux
(RHSA-2013:1476) Critical: firefox security update xulrunner-17.0.10-1.el5_10.x86_64.rpmLinux
(RHSA-2013:1476) Critical: firefox security update xulrunner-17.0.10-1.el6_4.i686.rpmLinux
(RHSA-2013:1476) Critical: firefox security update xulrunner-17.0.10-1.el6_4.x86_64.rpmLinux
(RHSA-2013:1476) Critical: firefox security update xulrunner-devel-17.0.10-1.el5_10.i386.rpmLinux
(RHSA-2013:1476) Critical: firefox security update xulrunner-devel-17.0.10-1.el5_10.x86_64.rpmLinux
(RHSA-2013:1476) Critical: firefox security update xulrunner-devel-17.0.10-1.el6_4.i686.rpmLinux
(RHSA-2013:1476) Critical: firefox security update xulrunner-devel-17.0.10-1.el6_4.x86_64.rpmLinux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-343015Mozilla Firefox (132.0.2)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-612783Mozilla Firefox For Mac (145.0.1)
PATCH-612783Mozilla Firefox For Mac (145.0.1)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234