Description
Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving a state-change event during an update of the offline cache.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2788-1 | iceweasel security update |
Debian DSA |
DSA-2797-1 | icedove security update |
EUVD |
EUVD-2013-5437 | Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving a state-change event during an update of the offline cache. |
Ubuntu USN |
USN-2009-1 | Firefox vulnerabilities |
Ubuntu USN |
USN-2010-1 | Thunderbird vulnerabilities |
References
History
Tue, 25 Nov 2025 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:mozilla:firefox_esr:24.0.2:*:*:*:*:*:*:* |
cpe:2.3:a:mozilla:firefox:24.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:24.0.2:*:*:*:*:*:*:* |
| Vendors & Products |
Mozilla firefox Esr
|
Mon, 21 Oct 2024 14:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:mozilla:firefox_esr:17.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:24.0:*:*:*:*:*:*:* |
cpe:2.3:a:mozilla:firefox:17.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:17.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:24.0:*:*:*:*:*:*:* |
Mon, 21 Oct 2024 13:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:mozilla:firefox_esr:17.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:17.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:17.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:17.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:17.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:17.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:17.0.9:*:*:*:*:*:*:* |
cpe:2.3:a:mozilla:firefox:17.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:17.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:17.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:17.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:17.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:17.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:17.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:17.0.9:*:*:*:*:*:*:* |
Status: PUBLISHED
Assigner: mozilla
Published:
Updated: 2024-08-06T17:15:21.584Z
Reserved: 2013-08-26T00:00:00.000Z
Link: CVE-2013-5597
No data.
Status : Modified
Published: 2013-10-30T10:55:04.490
Modified: 2026-04-29T01:13:23.040
Link: CVE-2013-5597
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD
Ubuntu USN