NetSight
IP …
critical9.3

CVE-2013-1724

Use-after-free vulnerability in the mozilla::dom::HTMLFormElement::IsDefaultSubmitElement function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and…

Impact

Use-after-free vulnerability in the mozilla::dom::HTMLFormElement::IsDefaultSubmitElement function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving a destroyed SELECT element.

Affected products

VendorProductAffected versions
MozillaSeamonkey
through 2.20
Versions 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4
MozillaFirefox
through 23.0.1
Versions 19.0, 19.0.1, 19.0.2, 20.0, 20.0.1
MozillaThunderbird
through 17.0.9
Versions 17.0, 17.0.1, 17.0.2, 17.0.3, 17.0.4

Weakness classification

CWE-399

References