Security Advisory

CVE-2013-1738

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-09-18 10:00:00

Last updated 2024-08-06 15:13:32

Assigner mozilla

CVSS score not scored

State PUBLISHED

Description

Use-after-free vulnerability in the JS_GetGlobalForScopeChain function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code by leveraging incorrect garbage collection in situations involving default compartments and frame-chain restoration.

← Browse all CVEs View on cve.org ↗