Description
Use-after-free vulnerability in the ListenerManager implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via vectors involving the triggering of garbage collection after memory allocation for listener objects.
Metrics
CVSS 2.0 9.3/10
AV:N/AC:M/Au:N/C:C/I:C/A:CWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.htmlMailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0144.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0145.htmlThird Party Advisory
- http://www.mozilla.org/security/announce/2013/mfsa2013-17.htmlVendor Advisory
- http://www.ubuntu.com/usn/USN-1681-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-1681-2Third Party Advisory
- http://www.ubuntu.com/usn/USN-1681-4Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=814026Issue Tracking, Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16812Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.htmlMailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0144.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0145.htmlThird Party Advisory
- http://www.mozilla.org/security/announce/2013/mfsa2013-17.htmlVendor Advisory
- http://www.ubuntu.com/usn/USN-1681-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-1681-2Third Party Advisory
- http://www.ubuntu.com/usn/USN-1681-4Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=814026Issue Tracking, Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16812Third Party Advisory
Timeline
- Published
- Jan 13, 2013
- Last modified
- Jun 16, 2026
- NVD status
- Modified