CVE-2013-1724: Use After Free
Published Sep 18, 2013
·Updated
Use-after-free vulnerability in the mozilla::dom::HTMLFormElement::IsDefaultSubmitElement function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving a destroyed SELECT element.
Affected Software
119 affected components
Mozilla SeaMonkey<=2.20
Mozilla SeaMonkey=2.0
Mozilla SeaMonkey=2.0-alpha_1
Mozilla SeaMonkey=2.0-alpha_2
Mozilla SeaMonkey=2.0-alpha_3
Mozilla SeaMonkey=2.0-beta_1
Mozilla SeaMonkey=2.0-beta_2
Mozilla SeaMonkey=2.0-rc1
Mozilla SeaMonkey=2.0-rc2
Mozilla SeaMonkey=2.0.1
Mozilla SeaMonkey=2.0.2
Mozilla SeaMonkey=2.0.3
Mozilla SeaMonkey=2.0.4
Mozilla SeaMonkey=2.0.5
Mozilla SeaMonkey=2.0.6
Mozilla SeaMonkey=2.0.7
Mozilla SeaMonkey=2.0.8
Mozilla SeaMonkey=2.0.9
Mozilla SeaMonkey=2.0.10
Mozilla SeaMonkey=2.0.11
Mozilla SeaMonkey=2.0.12
Mozilla SeaMonkey=2.0.13
Mozilla SeaMonkey=2.0.14
Mozilla SeaMonkey=2.1
Mozilla SeaMonkey=2.1-alpha1
Mozilla SeaMonkey=2.1-alpha2
Mozilla SeaMonkey=2.1-alpha3
Mozilla SeaMonkey=2.1-beta1
Mozilla SeaMonkey=2.1-beta2
Mozilla SeaMonkey=2.1-beta3
Mozilla SeaMonkey=2.1-rc1
Mozilla SeaMonkey=2.1-rc2
Mozilla SeaMonkey=2.10
Mozilla SeaMonkey=2.10-beta1
Mozilla SeaMonkey=2.10-beta2
Mozilla SeaMonkey=2.10-beta3
Mozilla SeaMonkey=2.10.1
Mozilla SeaMonkey=2.11
Mozilla SeaMonkey=2.11-beta1
Mozilla SeaMonkey=2.11-beta2
Mozilla SeaMonkey=2.11-beta3
Mozilla SeaMonkey=2.11-beta4
Mozilla SeaMonkey=2.11-beta5
Mozilla SeaMonkey=2.11-beta6
Mozilla SeaMonkey=2.12
Mozilla SeaMonkey=2.12-beta1
Mozilla SeaMonkey=2.12-beta2
Mozilla SeaMonkey=2.12-beta3
Mozilla SeaMonkey=2.12-beta4
Mozilla SeaMonkey=2.12-beta5
Mozilla SeaMonkey=2.12-beta6
Mozilla SeaMonkey=2.12.1
Mozilla SeaMonkey=2.13
Mozilla SeaMonkey=2.13-beta1
Mozilla SeaMonkey=2.13-beta2
Mozilla SeaMonkey=2.13-beta3
Mozilla SeaMonkey=2.13-beta4
Mozilla SeaMonkey=2.13-beta5
Mozilla SeaMonkey=2.13-beta6
Mozilla SeaMonkey=2.13.1
Mozilla SeaMonkey=2.13.2
Mozilla SeaMonkey=2.14
Mozilla SeaMonkey=2.14-beta1
Mozilla SeaMonkey=2.14-beta2
Mozilla SeaMonkey=2.14-beta3
Mozilla SeaMonkey=2.14-beta4
Mozilla SeaMonkey=2.14-beta5
Mozilla SeaMonkey=2.15
Mozilla SeaMonkey=2.15-beta1
Mozilla SeaMonkey=2.15-beta2
Mozilla SeaMonkey=2.15-beta3
Mozilla SeaMonkey=2.15-beta4
Mozilla SeaMonkey=2.15-beta5
Mozilla SeaMonkey=2.15-beta6
Mozilla SeaMonkey=2.15.1
Mozilla SeaMonkey=2.15.2
Mozilla SeaMonkey=2.16
Mozilla SeaMonkey=2.16-beta1
Mozilla SeaMonkey=2.16-beta2
Mozilla SeaMonkey=2.16-beta3
Mozilla SeaMonkey=2.16-beta4
Mozilla SeaMonkey=2.16-beta5
Mozilla SeaMonkey=2.16.1
Mozilla SeaMonkey=2.16.2
Mozilla SeaMonkey=2.17
Mozilla SeaMonkey=2.17-beta1
Mozilla SeaMonkey=2.17-beta2
Mozilla SeaMonkey=2.17-beta3
Mozilla SeaMonkey=2.17-beta4
Mozilla SeaMonkey=2.17.1
Mozilla SeaMonkey=2.18-beta1
Mozilla SeaMonkey=2.18-beta2
Mozilla SeaMonkey=2.18-beta3
Mozilla SeaMonkey=2.18-beta4
Mozilla SeaMonkey=2.19
Mozilla SeaMonkey=2.19-beta1
Mozilla SeaMonkey=2.19-beta2
Mozilla SeaMonkey=2.20-beta1
Mozilla SeaMonkey=2.20-beta2
Mozilla SeaMonkey=2.20-beta3
Mozilla Firefox<=23.0.1
Mozilla Firefox=19.0
Mozilla Firefox=19.0.1
Mozilla Firefox=19.0.2
Mozilla Firefox=20.0
Mozilla Firefox=20.0.1
Mozilla Firefox=21.0
Mozilla Firefox=22.0
Mozilla Firefox=23.0
Mozilla Thunderbird<=17.0.9
Mozilla Thunderbird=17.0
Mozilla Thunderbird=17.0.1
Mozilla Thunderbird=17.0.2
Mozilla Thunderbird=17.0.3
Mozilla Thunderbird=17.0.4
Mozilla Thunderbird=17.0.5
Mozilla Thunderbird=17.0.6
Mozilla Thunderbird=17.0.7
Mozilla Thunderbird=17.0.8
Event History
Sep 18, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1724?
CVE-2013-1724 is classified as a high severity vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2013-1724?
To fix CVE-2013-1724, users should upgrade their Mozilla Firefox, Thunderbird, or SeaMonkey to the latest version available.
3
What software is affected by CVE-2013-1724?
CVE-2013-1724 affects Mozilla Firefox versions before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21.
4
What type of vulnerability is CVE-2013-1724?
CVE-2013-1724 is a use-after-free vulnerability that can lead to heap memory corruption.
5
Can CVE-2013-1724 lead to denial of service?
Yes, CVE-2013-1724 can potentially cause a denial of service by inducing heap memory corruption.