Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to mListeners event listeners.
| CVE | CVE-2013-5616 |
|---|---|
| Severidad | CRITICAL |
| CVSS | 9.8 / 10 |
| EPSS | 6.7% en 30 días (percentil 94) |
| CWE | CWE-416 |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |
Productos afectados (catálogo NVD)
canonical/ubuntu_linuxfedoraproject/fedoramozilla/firefoxmozilla/seamonkeymozilla/thunderbirdopensuse/opensuseredhat/enterprise_linux_desktopredhat/enterprise_linux_eus