CVE catalog

CVE-2013-1685

iceweasel - several

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
3.54% · Oct 25, 2026

Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianiceweasel710.0.12esr-1vulnerable
Debianiceweasel710.0.12esr-1+alphavulnerable
Debianiceweasel710.0.12esr-1+nmu1vulnerable
Debianiceweasel710.0.12esr-1+nmu1+alphavulnerable
Debianiceweasel711.0-1vulnerable
Debianiceweasel711.0-2vulnerable
Debianiceweasel711.0-3vulnerable
Debianiceweasel711.0-4vulnerable
Debianiceweasel711.0~b1-1vulnerable
Debianiceweasel711.0~b1-2vulnerable
Debianiceweasel711.0~b2-1vulnerable
Debianiceweasel711.0~b3-1vulnerable
Debianiceweasel711.0~b4-1vulnerable
Debianiceweasel711.0~b5-1vulnerable
Debianiceweasel711.0~b6-1vulnerable
Debianiceweasel712.0-1vulnerable
Debianiceweasel712.0-2vulnerable
Debianiceweasel712.0-3vulnerable
Debianiceweasel712.0-4vulnerable
Debianiceweasel712.0-5vulnerable
Debianiceweasel712.0-6vulnerable
Debianiceweasel712.0-7vulnerable
Debianiceweasel713.0-1vulnerable
Debianiceweasel713.0.1-1vulnerable
Debianiceweasel713.0.1-2vulnerable
Debianiceweasel714.0.1-1vulnerable
Debianiceweasel714.0.1-2vulnerable
Debianiceweasel715.0-1vulnerable
Debianiceweasel715.0.1-1vulnerable
Debianiceweasel716.0-1vulnerable
Debianiceweasel716.0.1-1vulnerable
Debianiceweasel716.0.2-1vulnerable
Debianiceweasel717.0-1vulnerable
Debianiceweasel717.0.1-1vulnerable
Debianiceweasel717.0.1-2vulnerable
Debianiceweasel717.0.5esr-1vulnerable
Debianiceweasel717.0.6esr-1vulnerable
Debianiceweasel717.0.6esr-1~deb7u1vulnerable
Debianiceweasel717.0.7esr-1~deb7u1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianiceweaseldeb717.0.7esr-1~deb7u1Not reportedDSA-2716-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]