CVE-2013-0766: Use After Free
Use-after-free vulnerability in the ~nsHTMLEditRules implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0766?
CVE-2013-0766 has a high severity rating due to its potential to allow remote code execution.
How do I fix CVE-2013-0766?
The recommended solution for CVE-2013-0766 is to update Mozilla Firefox, Thunderbird, or SeaMonkey to the latest version.
Which versions are affected by CVE-2013-0766?
CVE-2013-0766 affects Mozilla Firefox versions prior to 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird versions before 17.0.2, and SeaMonkey versions before 2.15.
What types of attacks can CVE-2013-0766 facilitate?
CVE-2013-0766 can facilitate remote code execution attacks that may compromise user systems.
Is my operating system vulnerable to CVE-2013-0766?
Operating systems with affected versions of Firefox, Thunderbird, or SeaMonkey can be vulnerable to CVE-2013-0766.