CVE-2013-0787 in Firefox

Resumen (Inglés)

Use-after-free vulnerability in the nsEditor::IsPreformatted function in editor/libeditor/base/nsEditor.cpp in Mozilla Firefox before 19.0.2, Firefox ESR 17.x before 17.0.4, Thunderbird before 17.0.4, Thunderbird ESR 17.x before 17.0.4, and SeaMonkey before 2.16.1 allows remote attackers to execute arbitrary code via vectors involving an execCommand call.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2013-01-02

Divulgación

2013-03-11

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
7895	Mozilla Firefox HTML Editor nsEditor.cpp document.execCommand denegación de servicio	399	Prueba de concepto	Arreglo oficial	CVE-2013-0787

Fuentes

• MITRE
• NVD
• CVE Details