CVE-2013-1679
CRITICAL
10.0
CVSS Severity Score
Vulnerability Description
Use-after-free vulnerability in the mozilla::plugins::child::_geturlnotify function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Affected Platforms (CPE)
📦
Mozilla
Firefox
<= 20.0.1📦
Mozilla
Firefox
= 19.0📦
Mozilla
Firefox
= 19.0.1📦
Mozilla
Firefox
= 19.0.2📦
Mozilla
Firefox
= 20.0📦
Mozilla
Firefox
= 17.0📦
Mozilla
Firefox
= 17.0.1📦
Mozilla
Firefox
= 17.0.2📦
Mozilla
Firefox
= 17.0.3📦
Mozilla
Firefox
= 17.0.4📦
Mozilla
Firefox
= 17.0.5📦
Mozilla
Thunderbird
<= 17.0.5📦
Mozilla
Thunderbird
= 17.0📦
Mozilla
Thunderbird
= 17.0.1📦
Mozilla
Thunderbird
= 17.0.2📦
Mozilla
Thunderbird
= 17.0.3📦
Mozilla
Thunderbird
= 17.0.4📦
Mozilla
Thunderbird Esr
= 17.0📦
Mozilla
Thunderbird Esr
= 17.0.1📦
Mozilla
Thunderbird Esr
= 17.0.2📦
Mozilla
Thunderbird Esr
= 17.0.3📦
Mozilla
Thunderbird Esr
= 17.0.4📦
Mozilla