CVE-2013-0753
NoneCVSS
—
EPSS
51.3%
Published
Jan 13, 2013
CISA due date
—
The record
Use-after-free vulnerability in the serializeToStream implementation in the XMLSerializer component in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via crafted web content.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:5::server | firefox | 0 | 0:10.0.12-1.el5_9 |
| Red Hat:enterprise_linux:5::server | firefox-debuginfo | 0 | 0:10.0.12-1.el5_9 |
| Red Hat:enterprise_linux:5::server | xulrunner | 0 | 0:10.0.12-1.el5_9 |
| Red Hat:enterprise_linux:5::server | xulrunner-debuginfo | 0 | 0:10.0.12-1.el5_9 |
| Red Hat:enterprise_linux:5::server | xulrunner-devel | 0 | 0:10.0.12-1.el5_9 |
| Red Hat:enterprise_linux:6::client | firefox | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::client | firefox-debuginfo | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::client | thunderbird | 0 | 0:10.0.12-3.el6_3 |
| Red Hat:enterprise_linux:6::client | thunderbird-debuginfo | 0 | 0:10.0.12-3.el6_3 |
| Red Hat:enterprise_linux:6::client | xulrunner | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::client | xulrunner-debuginfo | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::client | xulrunner-devel | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | firefox | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | firefox-debuginfo | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | xulrunner | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | xulrunner-debuginfo | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | xulrunner-devel | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::server | firefox | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::server | firefox-debuginfo | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::server | thunderbird | 0 | 0:10.0.12-3.el6_3 |
| Red Hat:enterprise_linux:6::server | thunderbird-debuginfo | 0 | 0:10.0.12-3.el6_3 |
| Red Hat:enterprise_linux:6::server | xulrunner | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::server | xulrunner-debuginfo | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::server | xulrunner-devel | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | firefox | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | firefox-debuginfo | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | thunderbird | 0 | 0:10.0.12-3.el6_3 |
| Red Hat:enterprise_linux:6::workstation | thunderbird-debuginfo | 0 | 0:10.0.12-3.el6_3 |
| Red Hat:enterprise_linux:6::workstation | xulrunner | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | xulrunner-debuginfo | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | xulrunner-devel | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:rhel_productivity:5 | thunderbird | 0 | 0:10.0.12-3.el5_9 |
| Red Hat:rhel_productivity:5 | thunderbird-debuginfo | 0 | 0:10.0.12-3.el5_9 |
| openSUSE:Tumbleweed | MozillaFirefox | 0 | 50.1.0-1.1 |
| openSUSE:Tumbleweed | MozillaThunderbird | 0 | 45.5.1-1.1 |
| openSUSE:Tumbleweed | firefox-esr | 0 | 128.5.1-1.1 |
Related vulnerabilities
- CVE-2017-5404 A use-after-free error can occur when manipulating ranges in selections with one node… Also affects firefox
- CVE-2017-5398 Memory safety bugs were reported in Thunderbird 45.7. Also affects firefox
- CVE-2016-9899 Use-after-free while manipulating DOM events and removing audio elements due to errors in… Also affects firefox
- CVE-2017-5375 JIT code allocation can allow for a bypass of ASLR and DEP protections leading to… Also affects firefox
- CVE-2017-5373 Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Also affects firefox
- CVE-2016-9893 Memory safety bugs were reported in Thunderbird 45.5. Also affects firefox
- CVE-2016-9066 A buffer overflow resulting in a potentially exploitable crash due to memory allocation… Also affects firefox
- CVE-2016-9079 A use-after-free vulnerability in SVG Animation has been discovered. Also affects firefox