CVE-2013-0780: Use After Free
Use-after-free vulnerability in the nsOverflowContinuationTracker::Finish function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted document that uses Cascading Style Sheets (CSS) -moz-column- properties.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0780?
CVE-2013-0780 is classified as a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2013-0780?
To fix CVE-2013-0780, update your affected Mozilla Firefox, Thunderbird, or SeaMonkey installations to the latest versions available.
Which versions are affected by CVE-2013-0780?
CVE-2013-0780 affects Mozilla Firefox versions prior to 19.0, Firefox ESR versions prior to 17.0.3, and other specific versions of Thunderbird and SeaMonkey.
What platforms are impacted by CVE-2013-0780?
CVE-2013-0780 impacts multiple platforms including various Linux distributions such as openSUSE, Red Hat, and Ubuntu.
Can CVE-2013-0780 be exploited remotely?
Yes, CVE-2013-0780 can be exploited by remote attackers to execute arbitrary code on a vulnerable system.