CVE-2013-5596

Thunderbird < 24.1 - Remote Code Execution via Cycle Collection Race Condition

Title source: llm
STIX 2.1

Description

The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly determine the thread for release of an image object, which allows remote attackers to execute arbitrary code or cause a denial of service (race condition and application crash) via a large HTML document containing IMG elements, as demonstrated by the Never-Ending Reddit on reddit.com.

References (6)

Core 6
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=910881
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201504-01
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19066

Scores

EPSS 0.0314
EPSS Percentile 86.4%

Details

CWE
CWE-119
Status published
Products (32)
mozilla/firefox 24.0
mozilla/firefox 24.0.1
mozilla/firefox 24.0.2
mozilla/firefox 19.0
mozilla/firefox 19.0.1
mozilla/firefox 19.0.2
mozilla/firefox 20.0
mozilla/firefox 20.0.1
mozilla/firefox 21.0
mozilla/firefox 22.0
... and 22 more
Published Oct 30, 2013
Tracked Since Feb 18, 2026