CVE-2013-0745: Code Injection
The AutoWrapperChanger class in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not properly interact with garbage collection, which allows remote attackers to execute arbitrary code via a crafted HTML document referencing JavaScript objects.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0745?
CVE-2013-0745 has been classified as a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2013-0745?
To mitigate CVE-2013-0745, upgrade affected versions of Mozilla Firefox, Thunderbird, SeaMonkey, or their respective ESR versions to the latest versions.
Which versions are affected by CVE-2013-0745?
CVE-2013-0745 affects Mozilla Firefox versions prior to 18.0, Thunderbird prior to 17.0.2, SeaMonkey prior to 2.15, and their respective ESR versions.
What are the consequences of CVE-2013-0745?
Exploitation of CVE-2013-0745 could lead to an attacker executing arbitrary code on the target machine.
Is user intervention required to exploit CVE-2013-0745?
Yes, exploitation of CVE-2013-0745 typically requires the user to visit a malicious web page.