1. Home
  2. Vulnerabilities
  3. CVE-2013-5600

CVE-2013-5600

CVSS v2.0 10 (High)
100% Progress
EPSS 10.51 % (95th)
10.51% Progress
Affected Products 5
Advisories 10
Info CVSS EPSS Affected Configurations References Security Advisories Packages & Software OVAL Tools, Exploits & PoC Graph Web & Social Timeline

Use-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code via vectors involving a blob: URL.

Weaknesses
CWE-NVD-Other
CVE Status
PUBLISHED
CNA
Mozilla Corporation
Published Date
2013-10-30 10:55:04
(11 years ago)
Updated Date
2018-10-30 16:26:10
(5 years ago)

Affected Products

Mozilla

Configuration #1

    CPE23 From Up To
  Mozilla Firefox 24.0 and prior versions cpe:2.3:a:mozilla:firefox <= 24.0
  Mozilla Firefox 19.0 cpe:2.3:a:mozilla:firefox:19.0
  Mozilla Firefox 19.0.1 cpe:2.3:a:mozilla:firefox:19.0.1
  Mozilla Firefox 19.0.2 cpe:2.3:a:mozilla:firefox:19.0.2
  Mozilla Firefox 20.0 cpe:2.3:a:mozilla:firefox:20.0
  Mozilla Firefox 20.0.1 cpe:2.3:a:mozilla:firefox:20.0.1
  Mozilla Firefox 21.0 cpe:2.3:a:mozilla:firefox:21.0
  Mozilla Firefox 22.0 cpe:2.3:a:mozilla:firefox:22.0
  Mozilla Firefox 23.0 cpe:2.3:a:mozilla:firefox:23.0
  Mozilla Firefox 23.0.1 cpe:2.3:a:mozilla:firefox:23.0.1

Configuration #2

    CPE23 From Up To
  Mozilla Thunderbird 24.0.1 and prior versions cpe:2.3:a:mozilla:thunderbird <= 24.0.1
  Mozilla Thunderbird 17.0 cpe:2.3:a:mozilla:thunderbird:17.0
  Mozilla Thunderbird 17.0.1 cpe:2.3:a:mozilla:thunderbird:17.0.1
  Mozilla Thunderbird 17.0.2 cpe:2.3:a:mozilla:thunderbird:17.0.2
  Mozilla Thunderbird 17.0.3 cpe:2.3:a:mozilla:thunderbird:17.0.3
  Mozilla Thunderbird 17.0.4 cpe:2.3:a:mozilla:thunderbird:17.0.4
  Mozilla Thunderbird 17.0.5 cpe:2.3:a:mozilla:thunderbird:17.0.5
  Mozilla Thunderbird 17.0.6 cpe:2.3:a:mozilla:thunderbird:17.0.6
  Mozilla Thunderbird 17.0.7 cpe:2.3:a:mozilla:thunderbird:17.0.7
  Mozilla Thunderbird 17.0.8 cpe:2.3:a:mozilla:thunderbird:17.0.8
  Mozilla Thunderbird 24.0 cpe:2.3:a:mozilla:thunderbird:24.0
  Mozilla Thunderbird Esr 17.0.9 cpe:2.3:a:mozilla:thunderbird_esr:17.0.9

Configuration #3

    CPE23 From Up To
  Mozilla Seamonkey Beta2 2.22 and prior versions cpe:2.3:a:mozilla:seamonkey::beta2 <= 2.22
  Mozilla Seamonkey 2.0 cpe:2.3:a:mozilla:seamonkey:2.0
  Mozilla Seamonkey 2.0 Alpha 1 cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1
  Mozilla Seamonkey 2.0 Alpha 2 cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2
  Mozilla Seamonkey 2.0 Alpha 3 cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3
  Mozilla Seamonkey 2.0 Beta 1 cpe:2.3:a:mozilla:seamonkey:2.0:beta_1
  Mozilla Seamonkey 2.0 Beta 2 cpe:2.3:a:mozilla:seamonkey:2.0:beta_2
  Mozilla Seamonkey 2.0 Rc1 cpe:2.3:a:mozilla:seamonkey:2.0:rc1
  Mozilla Seamonkey 2.0 Rc2 cpe:2.3:a:mozilla:seamonkey:2.0:rc2
  Mozilla Seamonkey 2.0.1 cpe:2.3:a:mozilla:seamonkey:2.0.1
  Mozilla Seamonkey 2.0.2 cpe:2.3:a:mozilla:seamonkey:2.0.2
  Mozilla Seamonkey 2.0.3 cpe:2.3:a:mozilla:seamonkey:2.0.3
  Mozilla Seamonkey 2.0.4 cpe:2.3:a:mozilla:seamonkey:2.0.4
  Mozilla Seamonkey 2.0.5 cpe:2.3:a:mozilla:seamonkey:2.0.5
  Mozilla Seamonkey 2.0.6 cpe:2.3:a:mozilla:seamonkey:2.0.6
  Mozilla Seamonkey 2.0.7 cpe:2.3:a:mozilla:seamonkey:2.0.7
  Mozilla Seamonkey 2.0.8 cpe:2.3:a:mozilla:seamonkey:2.0.8
  Mozilla Seamonkey 2.0.9 cpe:2.3:a:mozilla:seamonkey:2.0.9
  Mozilla Seamonkey 2.0.10 cpe:2.3:a:mozilla:seamonkey:2.0.10
  Mozilla Seamonkey 2.0.11 cpe:2.3:a:mozilla:seamonkey:2.0.11
  Mozilla Seamonkey 2.0.12 cpe:2.3:a:mozilla:seamonkey:2.0.12
  Mozilla Seamonkey 2.0.13 cpe:2.3:a:mozilla:seamonkey:2.0.13
  Mozilla Seamonkey 2.0.14 cpe:2.3:a:mozilla:seamonkey:2.0.14
  Mozilla Seamonkey 2.1 cpe:2.3:a:mozilla:seamonkey:2.1
  Mozilla Seamonkey 2.1 Alpha1 cpe:2.3:a:mozilla:seamonkey:2.1:alpha1
  Mozilla Seamonkey 2.1 Alpha2 cpe:2.3:a:mozilla:seamonkey:2.1:alpha2
  Mozilla Seamonkey 2.1 Alpha3 cpe:2.3:a:mozilla:seamonkey:2.1:alpha3
  Mozilla Seamonkey 2.1 Beta1 cpe:2.3:a:mozilla:seamonkey:2.1:beta1
  Mozilla Seamonkey 2.1 Beta2 cpe:2.3:a:mozilla:seamonkey:2.1:beta2
  Mozilla Seamonkey 2.1 Beta3 cpe:2.3:a:mozilla:seamonkey:2.1:beta3
  Mozilla Seamonkey 2.1 Rc1 cpe:2.3:a:mozilla:seamonkey:2.1:rc1
  Mozilla Seamonkey 2.1 Rc2 cpe:2.3:a:mozilla:seamonkey:2.1:rc2
  Mozilla Seamonkey 2.10 cpe:2.3:a:mozilla:seamonkey:2.10
  Mozilla Seamonkey 2.10 Beta1 cpe:2.3:a:mozilla:seamonkey:2.10:beta1
  Mozilla Seamonkey 2.10 Beta2 cpe:2.3:a:mozilla:seamonkey:2.10:beta2
  Mozilla Seamonkey 2.10 Beta3 cpe:2.3:a:mozilla:seamonkey:2.10:beta3
  Mozilla Seamonkey 2.10.1 cpe:2.3:a:mozilla:seamonkey:2.10.1
  Mozilla Seamonkey 2.11 cpe:2.3:a:mozilla:seamonkey:2.11
  Mozilla Seamonkey 2.11 Beta1 cpe:2.3:a:mozilla:seamonkey:2.11:beta1
  Mozilla Seamonkey 2.11 Beta2 cpe:2.3:a:mozilla:seamonkey:2.11:beta2
  Mozilla Seamonkey 2.11 Beta3 cpe:2.3:a:mozilla:seamonkey:2.11:beta3
  Mozilla Seamonkey 2.11 Beta4 cpe:2.3:a:mozilla:seamonkey:2.11:beta4
  Mozilla Seamonkey 2.11 Beta5 cpe:2.3:a:mozilla:seamonkey:2.11:beta5
  Mozilla Seamonkey 2.11 Beta6 cpe:2.3:a:mozilla:seamonkey:2.11:beta6
  Mozilla Seamonkey 2.12 cpe:2.3:a:mozilla:seamonkey:2.12
  Mozilla Seamonkey 2.12 Beta1 cpe:2.3:a:mozilla:seamonkey:2.12:beta1
  Mozilla Seamonkey 2.12 Beta2 cpe:2.3:a:mozilla:seamonkey:2.12:beta2
  Mozilla Seamonkey 2.12 Beta3 cpe:2.3:a:mozilla:seamonkey:2.12:beta3
  Mozilla Seamonkey 2.12 Beta4 cpe:2.3:a:mozilla:seamonkey:2.12:beta4
  Mozilla Seamonkey 2.12 Beta5 cpe:2.3:a:mozilla:seamonkey:2.12:beta5
  Mozilla Seamonkey 2.12 Beta6 cpe:2.3:a:mozilla:seamonkey:2.12:beta6
  Mozilla Seamonkey 2.12.1 cpe:2.3:a:mozilla:seamonkey:2.12.1
  Mozilla Seamonkey 2.13 cpe:2.3:a:mozilla:seamonkey:2.13
  Mozilla Seamonkey 2.13 Beta1 cpe:2.3:a:mozilla:seamonkey:2.13:beta1
  Mozilla Seamonkey 2.13 Beta2 cpe:2.3:a:mozilla:seamonkey:2.13:beta2
  Mozilla Seamonkey 2.13 Beta3 cpe:2.3:a:mozilla:seamonkey:2.13:beta3
  Mozilla Seamonkey 2.13 Beta4 cpe:2.3:a:mozilla:seamonkey:2.13:beta4
  Mozilla Seamonkey 2.13 Beta5 cpe:2.3:a:mozilla:seamonkey:2.13:beta5
  Mozilla Seamonkey 2.13 Beta6 cpe:2.3:a:mozilla:seamonkey:2.13:beta6
  Mozilla Seamonkey 2.13.1 cpe:2.3:a:mozilla:seamonkey:2.13.1
  Mozilla Seamonkey 2.13.2 cpe:2.3:a:mozilla:seamonkey:2.13.2
  Mozilla Seamonkey 2.14 cpe:2.3:a:mozilla:seamonkey:2.14
  Mozilla Seamonkey 2.14 Beta1 cpe:2.3:a:mozilla:seamonkey:2.14:beta1
  Mozilla Seamonkey 2.14 Beta2 cpe:2.3:a:mozilla:seamonkey:2.14:beta2
  Mozilla Seamonkey 2.14 Beta3 cpe:2.3:a:mozilla:seamonkey:2.14:beta3
  Mozilla Seamonkey 2.14 Beta4 cpe:2.3:a:mozilla:seamonkey:2.14:beta4
  Mozilla Seamonkey 2.14 Beta5 cpe:2.3:a:mozilla:seamonkey:2.14:beta5
  Mozilla Seamonkey 2.15 cpe:2.3:a:mozilla:seamonkey:2.15
  Mozilla Seamonkey 2.15 Beta1 cpe:2.3:a:mozilla:seamonkey:2.15:beta1
  Mozilla Seamonkey 2.15 Beta2 cpe:2.3:a:mozilla:seamonkey:2.15:beta2
  Mozilla Seamonkey 2.15 Beta3 cpe:2.3:a:mozilla:seamonkey:2.15:beta3
  Mozilla Seamonkey 2.15 Beta4 cpe:2.3:a:mozilla:seamonkey:2.15:beta4
  Mozilla Seamonkey 2.15 Beta5 cpe:2.3:a:mozilla:seamonkey:2.15:beta5
  Mozilla Seamonkey 2.15 Beta6 cpe:2.3:a:mozilla:seamonkey:2.15:beta6
  Mozilla Seamonkey 2.15.1 cpe:2.3:a:mozilla:seamonkey:2.15.1
  Mozilla Seamonkey 2.15.2 cpe:2.3:a:mozilla:seamonkey:2.15.2
  Mozilla Seamonkey 2.16 cpe:2.3:a:mozilla:seamonkey:2.16
  Mozilla Seamonkey 2.16 Beta1 cpe:2.3:a:mozilla:seamonkey:2.16:beta1
  Mozilla Seamonkey 2.16 Beta2 cpe:2.3:a:mozilla:seamonkey:2.16:beta2
  Mozilla Seamonkey 2.16 Beta3 cpe:2.3:a:mozilla:seamonkey:2.16:beta3
  Mozilla Seamonkey 2.16 Beta4 cpe:2.3:a:mozilla:seamonkey:2.16:beta4
  Mozilla Seamonkey 2.16 Beta5 cpe:2.3:a:mozilla:seamonkey:2.16:beta5
  Mozilla Seamonkey 2.16.1 cpe:2.3:a:mozilla:seamonkey:2.16.1
  Mozilla Seamonkey 2.16.2 cpe:2.3:a:mozilla:seamonkey:2.16.2
  Mozilla Seamonkey 2.17 cpe:2.3:a:mozilla:seamonkey:2.17
  Mozilla Seamonkey 2.17 Beta1 cpe:2.3:a:mozilla:seamonkey:2.17:beta1
  Mozilla Seamonkey 2.17 Beta2 cpe:2.3:a:mozilla:seamonkey:2.17:beta2
  Mozilla Seamonkey 2.17 Beta3 cpe:2.3:a:mozilla:seamonkey:2.17:beta3
  Mozilla Seamonkey 2.17 Beta4 cpe:2.3:a:mozilla:seamonkey:2.17:beta4
  Mozilla Seamonkey 2.17.1 cpe:2.3:a:mozilla:seamonkey:2.17.1
  Mozilla Seamonkey 2.18 Beta1 cpe:2.3:a:mozilla:seamonkey:2.18:beta1
  Mozilla Seamonkey 2.18 Beta2 cpe:2.3:a:mozilla:seamonkey:2.18:beta2
  Mozilla Seamonkey 2.18 Beta3 cpe:2.3:a:mozilla:seamonkey:2.18:beta3
  Mozilla Seamonkey 2.18 Beta4 cpe:2.3:a:mozilla:seamonkey:2.18:beta4
  Mozilla Seamonkey 2.19 cpe:2.3:a:mozilla:seamonkey:2.19
  Mozilla Seamonkey 2.19 Beta1 cpe:2.3:a:mozilla:seamonkey:2.19:beta1
  Mozilla Seamonkey 2.19 Beta2 cpe:2.3:a:mozilla:seamonkey:2.19:beta2
  Mozilla Seamonkey 2.20 cpe:2.3:a:mozilla:seamonkey:2.20
  Mozilla Seamonkey 2.20 Beta1 cpe:2.3:a:mozilla:seamonkey:2.20:beta1
  Mozilla Seamonkey 2.20 Beta2 cpe:2.3:a:mozilla:seamonkey:2.20:beta2
  Mozilla Seamonkey 2.20 Beta3 cpe:2.3:a:mozilla:seamonkey:2.20:beta3
  Mozilla Seamonkey 2.21 Beta1 cpe:2.3:a:mozilla:seamonkey:2.21:beta1
  Mozilla Seamonkey 2.21 Beta2 cpe:2.3:a:mozilla:seamonkey:2.21:beta2
  Mozilla Seamonkey 2.22 Beta1 cpe:2.3:a:mozilla:seamonkey:2.22:beta1

Configuration #4

    CPE23 From Up To
  Mozilla Thunderbird Esr 17.0 cpe:2.3:a:mozilla:thunderbird_esr:17.0
  Mozilla Thunderbird Esr 17.0.1 cpe:2.3:a:mozilla:thunderbird_esr:17.0.1
  Mozilla Thunderbird Esr 17.0.2 cpe:2.3:a:mozilla:thunderbird_esr:17.0.2
  Mozilla Thunderbird Esr 17.0.3 cpe:2.3:a:mozilla:thunderbird_esr:17.0.3
  Mozilla Thunderbird Esr 17.0.4 cpe:2.3:a:mozilla:thunderbird_esr:17.0.4
  Mozilla Thunderbird Esr 17.0.5 cpe:2.3:a:mozilla:thunderbird_esr:17.0.5
  Mozilla Thunderbird Esr 17.0.6 cpe:2.3:a:mozilla:thunderbird_esr:17.0.6
  Mozilla Thunderbird Esr 17.0.7 cpe:2.3:a:mozilla:thunderbird_esr:17.0.7
  Mozilla Thunderbird Esr 17.0.8 cpe:2.3:a:mozilla:thunderbird_esr:17.0.8
  Mozilla Thunderbird Esr 17.0.9 cpe:2.3:a:mozilla:thunderbird_esr:17.0.9

Configuration #5

    CPE23 From Up To
  Mozilla Firefox Esr 17.0 cpe:2.3:a:mozilla:firefox_esr:17.0
  Mozilla Firefox Esr 17.0.1 cpe:2.3:a:mozilla:firefox_esr:17.0.1
  Mozilla Firefox Esr 17.0.2 cpe:2.3:a:mozilla:firefox_esr:17.0.2
  Mozilla Firefox Esr 17.0.3 cpe:2.3:a:mozilla:firefox_esr:17.0.3
  Mozilla Firefox Esr 17.0.4 cpe:2.3:a:mozilla:firefox_esr:17.0.4
  Mozilla Firefox Esr 17.0.5 cpe:2.3:a:mozilla:firefox_esr:17.0.5
  Mozilla Firefox Esr 17.0.6 cpe:2.3:a:mozilla:firefox_esr:17.0.6
  Mozilla Firefox Esr 17.0.7 cpe:2.3:a:mozilla:firefox_esr:17.0.7
  Mozilla Firefox Esr 17.0.8 cpe:2.3:a:mozilla:firefox_esr:17.0.8
  Mozilla Firefox Esr 17.0.9 cpe:2.3:a:mozilla:firefox_esr:17.0.9
  Mozilla Firefox Esr 24.0 cpe:2.3:a:mozilla:firefox_esr:24.0
  Mozilla Firefox Esr 24.0.1 cpe:2.3:a:mozilla:firefox_esr:24.0.1
  Mozilla Firefox Esr 24.0.2 cpe:2.3:a:mozilla:firefox_esr:24.0.2