NetSight
IP …
critical9.3

CVE-2013-1722

Use-after-free vulnerability in the nsAnimationManager::BuildAnimations function in the Animation Manager in Mozilla Firefox before 24.0, Firefox ESR 17.x befo…

Impact

Use-after-free vulnerability in the nsAnimationManager::BuildAnimations function in the Animation Manager in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving stylesheet cloning.

Affected products

VendorProductAffected versions
MozillaThunderbird
through 17.0.9
Versions 17.0, 17.0.1, 17.0.2, 17.0.3, 17.0.4
MozillaFirefox
through 23.0.1
Versions 19.0, 19.0.1, 19.0.2, 20.0, 20.0.1
MozillaThunderbird Esr
Versions 17.0, 17.0.1, 17.0.2, 17.0.3, 17.0.4, 17.0.5
MozillaSeamonkey
through 2.20
Versions 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4

Weakness classification

CWE-399

References