CVE-2013-5599
Summary
| CVE | CVE-2013-5599 |
|---|---|
| State | PUBLISHED |
| Assigner | mozilla |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2013-10-30 10:55:04 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka presentation shell) implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors involving a CANVAS element, a mozTextStyle attribute, and an onresize event. |
Risk And Classification
Primary CVSS: v2.0 10 from [email protected]
AV:N/AC:L/Au:N/C:C/I:C/A:C
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:L/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mozilla | Firefox | 19.0 | All | All | All |
| Application | Mozilla | Firefox | 19.0.1 | All | All | All |
| Application | Mozilla | Firefox | 19.0.2 | All | All | All |
| Application | Mozilla | Firefox | 20.0 | All | All | All |
| Application | Mozilla | Firefox | 20.0.1 | All | All | All |
| Application | Mozilla | Firefox | 21.0 | All | All | All |
| Application | Mozilla | Firefox | 22.0 | All | All | All |
| Application | Mozilla | Firefox | 23.0 | All | All | All |
| Application | Mozilla | Firefox | 23.0.1 | All | All | All |
| Application | Mozilla | Firefox | All | All | All | All |
| Application | Mozilla | Seamonkey | 2.0 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0 | alpha_1 | All | All |
| Application | Mozilla | Seamonkey | 2.0 | alpha_2 | All | All |
| Application | Mozilla | Seamonkey | 2.0 | alpha_3 | All | All |
| Application | Mozilla | Seamonkey | 2.0 | beta_1 | All | All |
| Application | Mozilla | Seamonkey | 2.0 | beta_2 | All | All |
| Application | Mozilla | Seamonkey | 2.0 | rc1 | All | All |
| Application | Mozilla | Seamonkey | 2.0 | rc2 | All | All |
| Application | Mozilla | Seamonkey | 2.0.1 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.10 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.11 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.12 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.13 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.14 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.2 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.3 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.4 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.5 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.6 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.7 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.8 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.9 | All | All | All |
| Application | Mozilla | Seamonkey | 2.1 | All | All | All |
| Application | Mozilla | Seamonkey | 2.1 | alpha1 | All | All |
| Application | Mozilla | Seamonkey | 2.1 | alpha2 | All | All |
| Application | Mozilla | Seamonkey | 2.1 | alpha3 | All | All |
| Application | Mozilla | Seamonkey | 2.1 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.1 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.1 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.1 | rc1 | All | All |
| Application | Mozilla | Seamonkey | 2.1 | rc2 | All | All |
| Application | Mozilla | Seamonkey | 2.10 | All | All | All |
| Application | Mozilla | Seamonkey | 2.10 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.10 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.10 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.10.1 | All | All | All |
| Application | Mozilla | Seamonkey | 2.11 | All | All | All |
| Application | Mozilla | Seamonkey | 2.11 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.11 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.11 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.11 | beta4 | All | All |
| Application | Mozilla | Seamonkey | 2.11 | beta5 | All | All |
| Application | Mozilla | Seamonkey | 2.11 | beta6 | All | All |
| Application | Mozilla | Seamonkey | 2.12 | All | All | All |
| Application | Mozilla | Seamonkey | 2.12 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.12 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.12 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.12 | beta4 | All | All |
| Application | Mozilla | Seamonkey | 2.12 | beta5 | All | All |
| Application | Mozilla | Seamonkey | 2.12 | beta6 | All | All |
| Application | Mozilla | Seamonkey | 2.12.1 | All | All | All |
| Application | Mozilla | Seamonkey | 2.13 | All | All | All |
| Application | Mozilla | Seamonkey | 2.13 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.13 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.13 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.13 | beta4 | All | All |
| Application | Mozilla | Seamonkey | 2.13 | beta5 | All | All |
| Application | Mozilla | Seamonkey | 2.13 | beta6 | All | All |
| Application | Mozilla | Seamonkey | 2.13.1 | All | All | All |
| Application | Mozilla | Seamonkey | 2.13.2 | All | All | All |
| Application | Mozilla | Seamonkey | 2.14 | All | All | All |
| Application | Mozilla | Seamonkey | 2.14 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.14 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.14 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.14 | beta4 | All | All |
| Application | Mozilla | Seamonkey | 2.14 | beta5 | All | All |
| Application | Mozilla | Seamonkey | 2.15 | All | All | All |
| Application | Mozilla | Seamonkey | 2.15 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.15 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.15 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.15 | beta4 | All | All |
| Application | Mozilla | Seamonkey | 2.15 | beta5 | All | All |
| Application | Mozilla | Seamonkey | 2.15 | beta6 | All | All |
| Application | Mozilla | Seamonkey | 2.15.1 | All | All | All |
| Application | Mozilla | Seamonkey | 2.15.2 | All | All | All |
| Application | Mozilla | Seamonkey | 2.16 | All | All | All |
| Application | Mozilla | Seamonkey | 2.16 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.16 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.16 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.16 | beta4 | All | All |
| Application | Mozilla | Seamonkey | 2.16 | beta5 | All | All |
| Application | Mozilla | Seamonkey | 2.16.1 | All | All | All |
| Application | Mozilla | Seamonkey | 2.16.2 | All | All | All |
| Application | Mozilla | Seamonkey | 2.17 | All | All | All |
| Application | Mozilla | Seamonkey | 2.17 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.17 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.17 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.17 | beta4 | All | All |
| Application | Mozilla | Seamonkey | 2.17.1 | All | All | All |
| Application | Mozilla | Seamonkey | 2.18 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.18 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.18 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.18 | beta4 | All | All |
| Application | Mozilla | Seamonkey | 2.19 | All | All | All |
| Application | Mozilla | Seamonkey | 2.19 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.19 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.20 | All | All | All |
| Application | Mozilla | Seamonkey | 2.20 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.20 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.20 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.21 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.21 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.22 | beta1 | All | All |
| Application | Mozilla | Seamonkey | All | beta2 | All | All |
| Application | Mozilla | Thunderbird | 17.0 | All | All | All |
| Application | Mozilla | Thunderbird | 17.0.1 | All | All | All |
| Application | Mozilla | Thunderbird | 17.0.2 | All | All | All |
| Application | Mozilla | Thunderbird | 17.0.3 | All | All | All |
| Application | Mozilla | Thunderbird | 17.0.4 | All | All | All |
| Application | Mozilla | Thunderbird | 17.0.5 | All | All | All |
| Application | Mozilla | Thunderbird | 17.0.6 | All | All | All |
| Application | Mozilla | Thunderbird | 17.0.7 | All | All | All |
| Application | Mozilla | Thunderbird | 17.0.8 | All | All | All |
| Application | Mozilla | Thunderbird | 24.0 | All | All | All |
| Application | Mozilla | Thunderbird | All | All | All | All |
| Application | Mozilla | Thunderbird Esr | 17.0 | All | All | All |
| Application | Mozilla | Thunderbird Esr | 17.0.1 | All | All | All |
| Application | Mozilla | Thunderbird Esr | 17.0.2 | All | All | All |
| Application | Mozilla | Thunderbird Esr | 17.0.3 | All | All | All |
| Application | Mozilla | Thunderbird Esr | 17.0.4 | All | All | All |
| Application | Mozilla | Thunderbird Esr | 17.0.5 | All | All | All |
| Application | Mozilla | Thunderbird Esr | 17.0.6 | All | All | All |
| Application | Mozilla | Thunderbird Esr | 17.0.7 | All | All | All |
| Application | Mozilla | Thunderbird Esr | 17.0.8 | All | All | All |
| Application | Mozilla | Thunderbird Esr | 17.0.9 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 915210 – (CVE-2013-5599) ASAN heap-use-after-free in nsIPresShell::GetPresContext() with canvas, onresize and mozTextStyle | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.mozilla.org | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| Gentoo Security | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| Debian -- Security Information -- DSA-2797-1 icedove | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| [security-announce] SUSE-SU-2013:1678-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| [security-announce] openSUSE-SU-2013:1633-1: important: Mozilla Suite: U | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| [security-announce] openSUSE-SU-2013:1634-1: important: Mozilla updates | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| MFSA 2013-100: Miscellaneous use-after-free issues found through ASAN fuzzing | af854a3a-2127-422b-91ae-364da2661108 | www.mozilla.org | Vendor Advisory |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| Debian -- Security Information -- DSA-2788-1 iceweasel | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.