CVE-2013-5613: Use After Free
Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving synthetic mouse movement, related to the RestyleManager::GetHoverGeneration function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5613?
CVE-2013-5613 is classified as a critical vulnerability as it allows remote attackers to execute arbitrary code or cause a denial of service.
Which versions of Mozilla Firefox are affected by CVE-2013-5613?
Mozilla Firefox versions before 26.0 are affected by CVE-2013-5613.
How do I fix CVE-2013-5613?
To fix CVE-2013-5613, update your affected software to the latest version released by Mozilla.
What types of software are impacted by CVE-2013-5613?
CVE-2013-5613 affects Mozilla Firefox, Firefox ESR, Thunderbird, and SeaMonkey before specified versions.
Is there a way to mitigate CVE-2013-5613 if I cannot update immediately?
If you cannot update immediately, consider using a different browser or temporarily disabling JavaScript to mitigate CVE-2013-5613.