CVE-2013-1684

CRITICAL 9.3CVE-2013-1684 · Published 26/06/2013 · updated 16/06/2026

In short

CVE-2013-1684 is a CRITICAL (CVSS 9.3) vulnerability affecting firefox (mozilla), thunderbird (mozilla), thunderbird esr (mozilla).
Chance of exploitation in the next 30 days (EPSS): 3.5%, higher than 89.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
firefox mozilla	`= 17.0= 17.0.1= 17.0.2= 17.0.3= 17.0.4= 17.0.5= 17.0.6= 19.0= 19.0.1= 19.0.2= 20.0= 20.0.1≤ 21.0`	No fix yet
thunderbird mozilla	`= 17.0= 17.0.1= 17.0.2= 17.0.3= 17.0.4= 17.0.5≤ 17.0.6`	No fix yet
thunderbird esr mozilla	`= 17.0= 17.0.1= 17.0.2= 17.0.3= 17.0.4= 17.0.5= 17.0.6`	No fix yet

Description

Use-after-free vulnerability in the mozilla::dom::HTMLMediaElement::LookupMediaElementURITable function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site.

References

More vulnerabilities in firefox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free