CVE-2013-0787 Use after free in n/a

Critical 9.3 Published 11 Mar 2013 Updated 6 Aug 2024

Remote attackers can execute arbitrary code via a use-after-free vulnerability in Firefox triggered by execCommand calls.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2013-0787?

CVE-2013-0787 is a critical use after free vulnerability in Mozilla Firefox, published on 11 Mar 2013. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Use-after-free vulnerability in the nsEditor::IsPreformatted function in editor/libeditor/base/nsEditor.cpp in Mozilla Firefox before 19.0.2, Firefox ESR 17.x before 17.0.4, Thunderbird before 17.0.4, Thunderbird ESR 17.x before 17.0.4, and SeaMonkey before 2.16.1 allows remote attackers to execute arbitrary code via vectors involving an execCommand call.

Weakness: CWE-399

Which versions are affected by CVE-2013-0787?

It affects 4 products.

Linux distribution packages (23)

`xulrunner` Red Hat:enterprise_linux:5::server	All versions	`0:17.0.3-2.el5_9`
`xulrunner-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:17.0.3-2.el5_9`
`xulrunner-devel` Red Hat:enterprise_linux:5::server	All versions	`0:17.0.3-2.el5_9`
`thunderbird` Red Hat:enterprise_linux:6::client	All versions	`0:17.0.3-2.el6_4`
`thunderbird-debuginfo` Red Hat:enterprise_linux:6::client	All versions	`0:17.0.3-2.el6_4`
`xulrunner` Red Hat:enterprise_linux:6::client	All versions	`0:17.0.3-2.el6_4`
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::client	All versions	`0:17.0.3-2.el6_4`
`xulrunner-devel` Red Hat:enterprise_linux:6::client	All versions	`0:17.0.3-2.el6_4`
`xulrunner` Red Hat:enterprise_linux:6::computenode	All versions	`0:17.0.3-2.el6_4`
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::computenode	All versions	`0:17.0.3-2.el6_4`
`xulrunner-devel` Red Hat:enterprise_linux:6::computenode	All versions	`0:17.0.3-2.el6_4`
`thunderbird` Red Hat:enterprise_linux:6::server	All versions	`0:17.0.3-2.el6_4`
`thunderbird-debuginfo` Red Hat:enterprise_linux:6::server	All versions	`0:17.0.3-2.el6_4`
`xulrunner` Red Hat:enterprise_linux:6::server	All versions	`0:17.0.3-2.el6_4`
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::server	All versions	`0:17.0.3-2.el6_4`
`xulrunner-devel` Red Hat:enterprise_linux:6::server	All versions	`0:17.0.3-2.el6_4`
`thunderbird` Red Hat:enterprise_linux:6::workstation	All versions	`0:17.0.3-2.el6_4`
`thunderbird-debuginfo` Red Hat:enterprise_linux:6::workstation	All versions	`0:17.0.3-2.el6_4`
`xulrunner` Red Hat:enterprise_linux:6::workstation	All versions	`0:17.0.3-2.el6_4`
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::workstation	All versions	`0:17.0.3-2.el6_4`
`xulrunner-devel` Red Hat:enterprise_linux:6::workstation	All versions	`0:17.0.3-2.el6_4`
`thunderbird` Red Hat:rhel_productivity:5	All versions	`0:17.0.3-2.el5_9`
`thunderbird-debuginfo` Red Hat:rhel_productivity:5	All versions	`0:17.0.3-2.el5_9`

Products include Mozilla Firefox, Mozilla Seamonkey, Mozilla Thunderbird, Mozilla Thunderbird Esr.

How do I fix CVE-2013-0787?

Upgrade to a fixed version.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2013-0787 being exploited?

There is no known exploitation of CVE-2013-0787 in the wild and no public exploit code.

All Mozilla Firefox vulnerabilities

Sources

Also known as GHSA-hp7j-mmg2-c8g7, RHSA-2013:0614, RHSA-2013:0627.