NVD Vulnerability Detail

CVE-2013-0787

Summary	Use-after-free vulnerability in the nsEditor::IsPreformatted function in editor/libeditor/base/nsEditor.cpp in Mozilla Firefox before 19.0.2, Firefox ESR 17.x before 17.0.4, Thunderbird before 17.0.4, Thunderbird ESR 17.x before 17.0.4, and SeaMonkey before 2.16.1 allows remote attackers to execute arbitrary code via vectors involving an execCommand call.
Publication Date	March 11, 2013, 7:55 p.m.
Registration Date	Jan. 26, 2021, 3:34 p.m.
Last Update	Nov. 21, 2024, 10:48 a.m.

CVSS2.0 : HIGH
Score	9.3
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	はい

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:mozilla:firefox:19.0:::::::*
cpe:2.3:a:mozilla:firefox::::::::		19.0.1

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:mozilla:firefox:17.0.2:::::::*
cpe:2.3:a:mozilla:firefox:17.0.3:::::::*
cpe:2.3:a:mozilla:firefox:17.0.1:::::::*
cpe:2.3:a:mozilla:firefox:17.0:::::::*

Configuration3	or higher	or less	more than	less than
cpe:2.3:a:mozilla:thunderbird::::::::		17.0.3
cpe:2.3:a:mozilla:thunderbird:17.0.1:::::::*
cpe:2.3:a:mozilla:thunderbird:17.0:::::::*
cpe:2.3:a:mozilla:thunderbird:17.0.2:::::::*

Configuration4	or higher	or less	more than	less than
cpe:2.3:a:mozilla:thunderbird_esr:17.0.1:::::::*
cpe:2.3:a:mozilla:thunderbird_esr:17.0.2:::::::*
cpe:2.3:a:mozilla:thunderbird_esr:17.0.3:::::::*
cpe:2.3:a:mozilla:thunderbird_esr:17.0:::::::*

Configuration5	or higher	or less	more than	less than
cpe:2.3:a:mozilla:seamonkey:2.16:beta4::::::
cpe:2.3:a:mozilla:seamonkey::::::::		2.16
cpe:2.3:a:mozilla:seamonkey:2.16:beta1::::::
cpe:2.3:a:mozilla:seamonkey:2.16:beta5::::::
cpe:2.3:a:mozilla:seamonkey:2.16:beta2::::::
cpe:2.3:a:mozilla:seamonkey:2.16:beta3::::::

Related information, measures and tools

No	URL	タグ
1	http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157
2	http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157
3	http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00010.html
4	http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00010.html
5	http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00023.html
6	http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00023.html
7	http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00025.html
8	http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00025.html
9	http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00026.html
10	http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00026.html
11	http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00028.html
12	http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00028.html
13	http://rhn.redhat.com/errata/RHSA-2013-0614.html
14	http://rhn.redhat.com/errata/RHSA-2013-0614.html
15	http://rhn.redhat.com/errata/RHSA-2013-0627.html
16	http://rhn.redhat.com/errata/RHSA-2013-0627.html
17	http://twitter.com/thezdi/statuses/309484730506698752
18	http://twitter.com/thezdi/statuses/309484730506698752
19	http://twitter.com/VUPEN/statuses/309505403631325184
20	http://twitter.com/VUPEN/statuses/309505403631325184
21	http://www.debian.org/security/2013/dsa-2699
22	http://www.debian.org/security/2013/dsa-2699
23	http://www.mozilla.org/security/announce/2013/mfsa2013-29.html	Vendor Advisory
24	http://www.mozilla.org/security/announce/2013/mfsa2013-29.html	Vendor Advisory
25	http://www.securityfocus.com/bid/58391
26	http://www.securityfocus.com/bid/58391
27	http://www.ubuntu.com/usn/USN-1758-1
28	http://www.ubuntu.com/usn/USN-1758-1
29	https://bugzilla.mozilla.org/show_bug.cgi?id=848644
30	https://bugzilla.mozilla.org/show_bug.cgi?id=848644
31	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16737
32	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16737

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-399	リソース管理の問題	https://cwe.mitre.org/data/definitions/399.html

JVN Vulnerability Information

複数の Mozilla 製品の editor/libeditor/base/nsEditor.cpp における任意のコードを実行される脆弱性

Title	複数の Mozilla 製品の editor/libeditor/base/nsEditor.cpp における任意のコードを実行される脆弱性
Summary	複数の Mozilla 製品の editor/libeditor/base/nsEditor.cpp 内の nsEditor::IsPreformatted 関数は、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。本脆弱性は、CanSecWest 2013 の Pwn2Own コンペティションにおいて実証されました。
Possible impacts	第三者により、任意のコードを実行される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	March 7, 2013, midnight
Registration Date	March 15, 2013, 3:25 p.m.
Last Update	June 19, 2013, 3:36 p.m.

Affected System

Mozilla Foundation

Mozilla Firefox 19.0.2 未満

Mozilla Firefox ESR 17.0.4 未満の 17.x

Mozilla SeaMonkey 2.16.1 未満

Mozilla Thunderbird 17.0.4 未満

Mozilla Thunderbird ESR 17.0.4 未満の 17.x

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2013-0787	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0787
National Vulnerability Database (NVD)
2	CVE-2013-0787	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0787

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-399	https://jvndb.jvn.jp/ja/cwe/CWE-399.html

ベンダー情報

No	Name	URL
Debian Security Advisory
1	DSA-2699	http://www.debian.org/security/2013/dsa-2699
Mozilla Bugzilla
2	Bug 848644	https://bugzilla.mozilla.org/show_bug.cgi?id=848644
Mozilla Foundation Security Advisory
3	MFSA2013-29	http://www.mozilla.org/security/announce/2013/mfsa2013-29.html
Mozilla Foundation セキュリティアドバイザリ
4	MFSA2013-29	http://www.mozilla-japan.org/security/announce/2013/mfsa2013-29.html
opensuse-security-announce
5	openSUSE-SU-2013:0431	http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00010.html
6	openSUSE-SU-2013:0465	http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00023.html
7	openSUSE-SU-2013:0467	http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00025.html
8	openSUSE-SU-2013:0468	http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00026.html
9	SUSE-SU-2013:0470	http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00028.html
Red Hat Security Advisory
10	RHSA-2013:0614	http://rhn.redhat.com/errata/RHSA-2013-0614.html
11	RHSA-2013:0627	http://rhn.redhat.com/errata/RHSA-2013-0627.html
Ubuntu Security Notice
12	USN-1758-1	http://www.ubuntu.com/usn/USN-1758-1

その他

No	Name	URL
関連文書
1	Pwn2Own 2013	http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157

Change Log

No	Changed Details	Date of change
0	[2013年03月15日] 掲載 [2013年03月26日] CVSS による深刻度：基本値と脆弱性評価基準を追加 CWE による脆弱性タイプ一覧：CWE-ID を追加 [2013年04月10日] ベンダ情報：openSUSE (openSUSE-SU-2013:0431) を追加ベンダ情報：レッドハット (RHSA-2013:0627) を追加ベンダ情報：レッドハット (RHSA-2013:0614) を追加ベンダ情報：Ubuntu (USN-1758-1) を追加 [2013年05月21日] ベンダ情報：openSUSE(SUSE-SU-2013:0470) を追加ベンダ情報：openSUSE(openSUSE-SU-2013:0468) を追加ベンダ情報：openSUSE(openSUSE-SU-2013:0467) を追加ベンダ情報：openSUSE(openSUSE-SU-2013:0465) を追加 [2013年06月19日] ベンダ情報：Debian (DSA-2699) を追加	Feb. 17, 2018, 10:37 a.m.