CVE-2013-0755: Use After Free
Use-after-free vulnerability in the mozVibrate implementation in the Vibrate library in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via vectors related to the domDoc pointer.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0755?
CVE-2013-0755 is classified as a critical vulnerability due to its ability to allow remote attackers to execute arbitrary code.
How do I fix CVE-2013-0755?
The recommended fix for CVE-2013-0755 is to update affected software to the latest version that is not vulnerable.
Which software is affected by CVE-2013-0755?
CVE-2013-0755 affects Mozilla Firefox versions before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird versions before 17.0.2, and SeaMonkey before 2.15.
How can CVE-2013-0755 be exploited?
CVE-2013-0755 can be exploited through use-after-free vulnerabilities in the mozVibrate implementation within the browser's Vibrate library.
Is there a workaround for CVE-2013-0755?
There is no known workaround for CVE-2013-0755; upgrading to a patched version is the only effective remediation.