CVE-2013-1704

Publication date 6 August 2013

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Use-after-free vulnerability in the nsINode::GetParentNode function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors involving a DOM modification at the time of a SetBody mutation event.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
firefox 13.04 raring
Fixed 23.0+build2-0ubuntu0.13.04.1
12.10 quantal
Fixed 23.0+build2-0ubuntu0.12.10.1
12.04 LTS precise
Fixed 23.0+build2-0ubuntu0.12.04.1
10.04 LTS lucid Ignored end of life

References

Related Ubuntu Security Notices (USN)

    • USN-1924-1
    • Firefox vulnerabilities
    • 6 August 2013

Other references