CVE-2013-1720

The nsHtml5TreeBuilder::resetTheInsertionMode function in the HTML5 Tree Builder in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before…

published September 18, 2013

CVSS
—
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

The nsHtml5TreeBuilder::resetTheInsertionMode function in the HTML5 Tree Builder in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 does not properly maintain the state of the insertion-mode stack for template elements, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer over-read) by triggering use of this stack in its empty state.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03991 · 90.5th percentile
Published
2013-09-18T10:00Z
EPSS history
Timeline
  • 18 SEP 10:00Z
    The nsHtml5TreeBuilder::resetTheInsertionMode function in the HTML5 Tree Builder in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before…
    cvelistv5