CVE-2013-1704

Firefox < 23.0 and SeaMonkey < 2.20 - Use-After-Free in nsINode::GetParentNode

Title source: llm
STIX 2.1

Description

Use-after-free vulnerability in the nsINode::GetParentNode function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors involving a DOM modification at the time of a SetBody mutation event.

References (3)

Core 3
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=883313
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18945

Scores

EPSS 0.0450
EPSS Percentile 90.4%

Details

CWE
CWE-399
Status published
Products (29)
mozilla/firefox 19.0
mozilla/firefox 19.0.1
mozilla/firefox 19.0.2
mozilla/firefox 20.0
mozilla/firefox 20.0.1
mozilla/firefox 21.0
mozilla/firefox < 22.0
mozilla/seamonkey 2.0 (8 CPE variants)
mozilla/seamonkey 2.0.1
mozilla/seamonkey 2.0.2
... and 19 more
Published Aug 07, 2013
Tracked Since Feb 18, 2026