Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2013-1720

The nsHtml5TreeBuilder::resetTheInsertionMode function in the HTML5 Tree Builder in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 does not properly maintain the state of the insertion-mode stack for template elements, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer over-read) by triggering use of this stack in its empty state.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.025
EPSS Ranking 84.4%
CVSS Severity
CVSS v2 Score 6.8
References
Products affected by CVE-2013-1720


Contact Us

Shodan ® - All rights reserved