CVE-2013-5616: Use After Free
Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to mListeners event listeners.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5616?
CVE-2013-5616 is classified as a critical vulnerability that can lead to remote code execution or denial of service.
How do I fix CVE-2013-5616?
To mitigate CVE-2013-5616, update Mozilla Firefox, SeaMonkey, Thunderbird, or your operating system to the version that includes the fix.
Which software is affected by CVE-2013-5616?
CVE-2013-5616 affects Mozilla Firefox versions before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23.
Can CVE-2013-5616 be exploited remotely?
Yes, CVE-2013-5616 can be exploited remotely, allowing attackers to execute arbitrary code.
Is there a known workaround for CVE-2013-5616?
There are no identified workarounds for CVE-2013-5616; the best course of action is to apply the official updates.