CVE-2013-1674

Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6…

published May 16, 2013

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky use-after-free vulnerability in Firefox and Thunderbird lets attackers potentially take control during video playback! Think of it like a glitchy video game where the character gets stuck in a loop, allowing an enemy to spring a surprise attack while your attention is diverted — that’s the risk here! If exploited, an attacker could execute arbitrary code on your system, opening the door to full control and unauthorized access. This could mean anything from stealing sensitive data to installing malicious software — absolutely devastating!

Put simply

Think of it like a glitchy video game where the character gets stuck in a loop, allowing an enemy to spring a surprise attack while your attention is diverted — that’s the risk here! This vulnerability occurs when the browser improperly handles memory after an object is freed, specifically during onresize events while videos are playing. This flaw allows attackers to exploit those memory mishaps to run their own code.

What to do

If exploited, an attacker could execute arbitrary code on your system, opening the door to full control and unauthorized access. This could mean anything from stealing sensitive data to installing malicious software — absolutely devastating! Update Firefox to version 21.0 or later, and Thunderbird to version 17.0.6 or later to ensure you're protected against this vulnerability. Regularly check for updates to keep your software secure! You’ve got this! Just follow these steps to keep your browser safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05828 · 93.1th percentile
Published
2013-05-16T10:00Z
EPSS history
Timeline
  • 16 MAY 10:00Z
    Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6…
    cvelistv5