Vulnerability in Mozilla Firefox
CVE-2013-1704
Use-after-free vulnerability in the nsINode::GetParentNode function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors involving a DOM modification at the time of a SetBody mutation event.
EPSS: 0.045 (90.5th percentile) — read the EPSS interpretation.
Affected products
- Mozilla Firefox — versions 19.0, 19.0.1, 19.0.2
- Mozilla Seamonkey — versions 2.0, 2.0.1, 2.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- security@mozilla.org (x_refsource_CONFIRM)
- security@mozilla.org (x_refsource_CONFIRM, Vendor Advisory)
- security@mozilla.org (signature, x_refsource_OVAL, vdb-entry)