Signature Detail

HTTP: Firefox SerializeStream Heap Use-After-Free

This signature detects attempts to exploit a known vulnerability against Mozilla Firefox. A successful attack can lead to arbitrary code execution.

Extended Description

Use-after-free vulnerability in the serializeToStream implementation in the XMLSerializer component in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via crafted web content.

Affected Products

• mozilla firefox 0.1
• mozilla firefox 0.10
• mozilla firefox 0.10.1
• mozilla firefox 0.2
• mozilla firefox 0.3
• mozilla firefox 0.4
• mozilla firefox 0.5
• mozilla firefox 0.6
• mozilla firefox 0.6.1
• mozilla firefox 0.7
• mozilla firefox 0.7.1
• mozilla firefox 0.8
• mozilla firefox 0.9.1
• mozilla firefox 0.9.2
• mozilla firefox 0.9.3
• mozilla firefox 0.9 (rc)
• mozilla firefox 10.0
• mozilla firefox 10.0.1
• mozilla firefox 10.0.2
• mozilla firefox 1.0.1
• mozilla firefox 1.0.2
• mozilla firefox 1.0.3
• mozilla firefox 1.0.4
• mozilla firefox 1.0.5
• mozilla firefox 1.0.6
• mozilla firefox 1.0.7
• mozilla firefox 1.0.8
• mozilla firefox 1.0 (preview_release)
• mozilla firefox 11.0
• mozilla firefox 12.0 (beta6)
• mozilla firefox 13.0
• mozilla firefox 13.0.1
• mozilla firefox 14.0
• mozilla firefox 14.0.1
• mozilla firefox 1.4.1
• mozilla firefox 15.0
• mozilla firefox 1.5.0.1
• mozilla firefox 15.0.1
• mozilla firefox 1.5.0.10
• mozilla firefox 1.5.0.11
• mozilla firefox 1.5.0.12
• mozilla firefox 1.5.0.2
• mozilla firefox 1.5.0.3
• mozilla firefox 1.5.0.4
• mozilla firefox 1.5.0.5
• mozilla firefox 1.5.0.6
• mozilla firefox 1.5.0.7
• mozilla firefox 1.5.0.8
• mozilla firefox 1.5.0.9
• mozilla firefox 1.5.1
• mozilla firefox 1.5.2
• mozilla firefox 1.5.3
• mozilla firefox 1.5.4
• mozilla firefox 1.5.5
• mozilla firefox 1.5.6
• mozilla firefox 1.5.7
• mozilla firefox 1.5.8
• mozilla firefox 1.5 (beta1)
• mozilla firefox 1.5 (beta2)
• mozilla firefox 16.0
• mozilla firefox 16.0.1
• mozilla firefox 16.0.2
• mozilla firefox 1.8
• mozilla firefox 2.0
• mozilla firefox 2.0.0.1
• mozilla firefox 2.0.0.10
• mozilla firefox 2.0.0.11
• mozilla firefox 2.0.0.12
• mozilla firefox 2.0.0.13
• mozilla firefox 2.0.0.14
• mozilla firefox 2.0.0.15
• mozilla firefox 2.0.0.16
• mozilla firefox 2.0.0.17
• mozilla firefox 2.0.0.18
• mozilla firefox 2.0.0.19
• mozilla firefox 2.0.0.2
• mozilla firefox 2.0.0.20
• mozilla firefox 2.0.0.3
• mozilla firefox 2.0.0.4
• mozilla firefox 2.0.0.5
• mozilla firefox 2.0.0.6
• mozilla firefox 2.0.0.7
• mozilla firefox 2.0.0.8
• mozilla firefox 2.0.0.9
• mozilla firefox 3.0
• mozilla firefox 3.0.1
• mozilla firefox 3.0.10
• mozilla firefox 3.0.11
• mozilla firefox 3.0.12
• mozilla firefox 3.0.13
• mozilla firefox 3.0.14
• mozilla firefox 3.0.15
• mozilla firefox 3.0.16
• mozilla firefox 3.0.17
• mozilla firefox 3.0.2
• mozilla firefox 3.0.3
• mozilla firefox 3.0.4
• mozilla firefox 3.0.5
• mozilla firefox 3.0.6
• mozilla firefox 3.0.7
• mozilla firefox 3.0.8
• mozilla firefox 3.0.9
• mozilla firefox 3.5
• mozilla firefox 3.5.1
• mozilla firefox 3.5.10
• mozilla firefox 3.5.11
• mozilla firefox 3.5.12
• mozilla firefox 3.5.13
• mozilla firefox 3.5.14
• mozilla firefox 3.5.15
• mozilla firefox 3.5.2
• mozilla firefox 3.5.3
• mozilla firefox 3.5.4
• mozilla firefox 3.5.5
• mozilla firefox 3.5.6
• mozilla firefox 3.5.7
• mozilla firefox 3.5.8
• mozilla firefox 3.5.9
• mozilla firefox 3.6
• mozilla firefox 3.6.10
• mozilla firefox 3.6.11
• mozilla firefox 3.6.12
• mozilla firefox 3.6.13
• mozilla firefox 3.6.14
• mozilla firefox 3.6.15
• mozilla firefox 3.6.16
• mozilla firefox 3.6.17
• mozilla firefox 3.6.18
• mozilla firefox 3.6.19
• mozilla firefox 3.6.2
• mozilla firefox 3.6.20
• mozilla firefox 3.6.21
• mozilla firefox 3.6.22
• mozilla firefox 3.6.23
• mozilla firefox 3.6.24
• mozilla firefox 3.6.25
• mozilla firefox 3.6.3
• mozilla firefox 3.6.4
• mozilla firefox 3.6.6
• mozilla firefox 3.6.7
• mozilla firefox 3.6.8
• mozilla firefox 3.6.9
• mozilla firefox 4.0.1
• mozilla firefox 4.0 (beta1)
• mozilla firefox 4.0 (beta10)
• mozilla firefox 4.0 (beta11)
• mozilla firefox 4.0 (beta12)
• mozilla firefox 4.0 (beta2)
• mozilla firefox 4.0 (beta3)
• mozilla firefox 4.0 (beta4)
• mozilla firefox 4.0 (beta5)
• mozilla firefox 4.0 (beta6)
• mozilla firefox 4.0 (beta7)
• mozilla firefox 4.0 (beta8)
• mozilla firefox 4.0 (beta9)
• mozilla firefox 5.0
• mozilla firefox 5.0.1
• mozilla firefox 6.0
• mozilla firefox 6.0.1
• mozilla firefox 6.0.2
• mozilla firefox 7.0
• mozilla firefox 7.0.1
• mozilla firefox 8.0
• mozilla firefox 8.0.1
• mozilla firefox 9.0
• mozilla firefox 9.0.1
• mozilla firefox up to 17.0.1
• mozilla firefox_esr 10.0
• mozilla firefox_esr 10.0.1
• mozilla firefox_esr 10.0.10
• mozilla firefox_esr 10.0.11
• mozilla firefox_esr 10.0.2
• mozilla firefox_esr 10.0.3
• mozilla firefox_esr 10.0.4
• mozilla firefox_esr 10.0.5
• mozilla firefox_esr 10.0.6
• mozilla firefox_esr 10.0.7
• mozilla firefox_esr 10.0.8
• mozilla firefox_esr 10.0.9
• mozilla firefox_esr 17.0
• mozilla firefox_esr 17.0.1
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.0.99
• mozilla seamonkey 1.0 (:alpha)
• mozilla seamonkey 1.0 (alpha)
• mozilla seamonkey 1.0 (:beta)
• mozilla seamonkey 1.0 (beta)
• mozilla seamonkey 1.0 (:dev)
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.10
• mozilla seamonkey 1.1.11
• mozilla seamonkey 1.1.12
• mozilla seamonkey 1.1.13
• mozilla seamonkey 1.1.14
• mozilla seamonkey 1.1.15
• mozilla seamonkey 1.1.16
• mozilla seamonkey 1.1.17
• mozilla seamonkey 1.1.18
• mozilla seamonkey 1.1.19
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5 (1.1.10)
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1 (alpha)
• mozilla seamonkey 1.1 (beta)
• mozilla seamonkey 1.5.0.10
• mozilla seamonkey 1.5.0.8
• mozilla seamonkey 1.5.0.9
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.10
• mozilla seamonkey 2.0.11
• mozilla seamonkey 2.0.12
• mozilla seamonkey 2.0.13
• mozilla seamonkey 2.0.14
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla seamonkey 2.0.4
• mozilla seamonkey 2.0.5
• mozilla seamonkey 2.0.6
• mozilla seamonkey 2.0.7
• mozilla seamonkey 2.0.8
• mozilla seamonkey 2.0.9
• mozilla seamonkey 2.0a1pre
• mozilla seamonkey 2.0a1 (:pre)
• mozilla seamonkey 2.0 (alpha_1)
• mozilla seamonkey 2.0 (alpha_2)
• mozilla seamonkey 2.0 (alpha_3)
• mozilla seamonkey 2.0 (beta_1)
• mozilla seamonkey 2.0 (beta_2)
• mozilla seamonkey 2.0 (rc1)
• mozilla seamonkey 2.0 (rc2)
• mozilla seamonkey 2.10.1
• mozilla seamonkey 2.10 (beta1)
• mozilla seamonkey 2.10 (beta2)
• mozilla seamonkey 2.10 (beta3)
• mozilla seamonkey 2.11 (beta1)
• mozilla seamonkey 2.11 (beta2)
• mozilla seamonkey 2.11 (beta3)
• mozilla seamonkey 2.11 (beta4)
• mozilla seamonkey 2.11 (beta5)
• mozilla seamonkey 2.11 (beta6)
• mozilla seamonkey 2.12.1
• mozilla seamonkey 2.12 (beta1)
• mozilla seamonkey 2.12 (beta2)
• mozilla seamonkey 2.12 (beta3)
• mozilla seamonkey 2.12 (beta4)
• mozilla seamonkey 2.12 (beta5)
• mozilla seamonkey 2.12 (beta6)
• mozilla seamonkey 2.13.1
• mozilla seamonkey 2.13.2
• mozilla seamonkey 2.13 (beta1)
• mozilla seamonkey 2.13 (beta2)
• mozilla seamonkey 2.13 (beta3)
• mozilla seamonkey 2.13 (beta4)
• mozilla seamonkey 2.13 (beta5)
• mozilla seamonkey 2.13 (beta6)
• mozilla seamonkey 2.14.1
• mozilla seamonkey 2.14 (beta1)
• mozilla seamonkey 2.14 (beta2)
• mozilla seamonkey 2.14 (beta3)
• mozilla seamonkey 2.14 (beta4)
• mozilla seamonkey 2.14 (beta5)
• mozilla seamonkey 2.1 (alpha1)
• mozilla seamonkey 2.1 (alpha2)
• mozilla seamonkey 2.1 (alpha3)
• mozilla seamonkey 2.1 (beta1)
• mozilla seamonkey 2.1 (beta2)
• mozilla seamonkey 2.1 (beta3)
• mozilla seamonkey 2.1 (rc1)
• mozilla seamonkey 2.1 (rc2)
• mozilla seamonkey 2.2 (beta1)
• mozilla seamonkey 2.2 (beta2)
• mozilla seamonkey 2.2 (beta3)
• mozilla seamonkey 2.3.1
• mozilla seamonkey 2.3.2
• mozilla seamonkey 2.3.3
• mozilla seamonkey 2.3 (beta1)
• mozilla seamonkey 2.3 (beta2)
• mozilla seamonkey 2.3 (beta3)
• mozilla seamonkey 2.4.1
• mozilla seamonkey 2.4 (beta1)
• mozilla seamonkey 2.4 (beta2)
• mozilla seamonkey 2.4 (beta3)
• mozilla seamonkey 2.5 (beta1)
• mozilla seamonkey 2.5 (beta2)
• mozilla seamonkey 2.5 (beta3)
• mozilla seamonkey 2.5 (beta4)
• mozilla seamonkey 2.6.1
• mozilla seamonkey 2.6 (beta1)
• mozilla seamonkey 2.6 (beta2)
• mozilla seamonkey 2.6 (beta3)
• mozilla seamonkey 2.6 (beta4)
• mozilla seamonkey 2.7.1
• mozilla seamonkey 2.7.2
• mozilla seamonkey 2.7 (beta1)
• mozilla seamonkey 2.7 (beta2)
• mozilla seamonkey 2.7 (beta3)
• mozilla seamonkey 2.7 (beta4)
• mozilla seamonkey 2.7 (beta5)
• mozilla seamonkey 2.8 (beta1)
• mozilla seamonkey 2.8 (beta2)
• mozilla seamonkey 2.8 (beta3)
• mozilla seamonkey 2.8 (beta4)
• mozilla seamonkey 2.8 (beta5)
• mozilla seamonkey 2.8 (beta6)
• mozilla seamonkey 2.9.1
• mozilla seamonkey 2.9 (beta1)
• mozilla seamonkey 2.9 (beta2)
• mozilla seamonkey 2.9 (beta3)
• mozilla seamonkey 2.9 (beta4)
• mozilla seamonkey up to 2.15 (beta1)
• mozilla seamonkey up to 2.15 (beta2)
• mozilla seamonkey up to 2.15 (beta3)
• mozilla seamonkey up to 2.15 (beta4)
• mozilla seamonkey up to 2.15 (beta5)
• mozilla seamonkey up to 2.15 (beta6)
• mozilla thunderbird 0.1
• mozilla thunderbird 0.2
• mozilla thunderbird 0.3
• mozilla thunderbird 0.4
• mozilla thunderbird 0.5
• mozilla thunderbird 0.6
• mozilla thunderbird 0.7
• mozilla thunderbird 0.7.1
• mozilla thunderbird 0.7.2
• mozilla thunderbird 0.7.3
• mozilla thunderbird 0.8
• mozilla thunderbird 0.9
• mozilla thunderbird 1.0
• mozilla thunderbird 10.0
• mozilla thunderbird 10.0.1
• mozilla thunderbird 10.0.2
• mozilla thunderbird 10.0.3
• mozilla thunderbird 10.0.4
• mozilla thunderbird 1.0.1
• mozilla thunderbird 1.0.2
• mozilla thunderbird 1.0.3
• mozilla thunderbird 1.0.4
• mozilla thunderbird 1.0.5 (beta)
• mozilla thunderbird 1.0.6
• mozilla thunderbird 1.0.7
• mozilla thunderbird 1.0.8
• mozilla thunderbird 11.0
• mozilla thunderbird 11.0.1
• mozilla thunderbird 12.0
• mozilla thunderbird 12.0.1
• mozilla thunderbird 13.0
• mozilla thunderbird 13.0.1
• mozilla thunderbird 14.0
• mozilla thunderbird 15.0
• mozilla thunderbird 1.5.0.1
• mozilla thunderbird 15.0.1
• mozilla thunderbird 1.5.0.10
• mozilla thunderbird 1.5.0.11
• mozilla thunderbird 1.5.0.12
• mozilla thunderbird 1.5.0.13
• mozilla thunderbird 1.5.0.14
• mozilla thunderbird 1.5.0.2
• mozilla thunderbird 1.5.0.3
• mozilla thunderbird 1.5.0.4
• mozilla thunderbird 1.5.0.5
• mozilla thunderbird 1.5.0.6
• mozilla thunderbird 1.5.0.7
• mozilla thunderbird 1.5.0.8
• mozilla thunderbird 1.5.0.9
• mozilla thunderbird 1.5.1
• mozilla thunderbird 1.5.2
• mozilla thunderbird 1.5 (beta2)
• mozilla thunderbird 16.0
• mozilla thunderbird 16.0.1
• mozilla thunderbird 16.0.2
• mozilla thunderbird 1.7.1
• mozilla thunderbird 1.7.3
• mozilla thunderbird 2.0
• mozilla thunderbird 2.0.0.0
• mozilla thunderbird 2.0.0.1
• mozilla thunderbird 2.0.0.11
• mozilla thunderbird 2.0.0.12
• mozilla thunderbird 2.0.0.13
• mozilla thunderbird 2.0.0.14
• mozilla thunderbird 2.0.0.15
• mozilla thunderbird 2.0.0.16
• mozilla thunderbird 2.0.0.17
• mozilla thunderbird 2.0.0.18
• mozilla thunderbird 2.0.0.19
• mozilla thunderbird 2.0.0.2
• mozilla thunderbird 2.0.0.20
• mozilla thunderbird 2.0.0.21
• mozilla thunderbird 2.0.0.22
• mozilla thunderbird 2.0.0.23
• mozilla thunderbird 2.0.0.3
• mozilla thunderbird 2.0.0.4
• mozilla thunderbird 2.0.0.5
• mozilla thunderbird 2.0.0.6
• mozilla thunderbird 2.0.0.7
• mozilla thunderbird 2.0.0.8
• mozilla thunderbird 2.0.0.9
• mozilla thunderbird 3.0
• mozilla thunderbird 3.0.1
• mozilla thunderbird 3.0.10
• mozilla thunderbird 3.0.11
• mozilla thunderbird 3.0.2
• mozilla thunderbird 3.0.3
• mozilla thunderbird 3.0.4
• mozilla thunderbird 3.0.5
• mozilla thunderbird 3.0.6
• mozilla thunderbird 3.0.7
• mozilla thunderbird 3.0.8
• mozilla thunderbird 3.0.9
• mozilla thunderbird 3.1
• mozilla thunderbird 3.1.1
• mozilla thunderbird 3.1.10
• mozilla thunderbird 3.1.11
• mozilla thunderbird 3.1.12
• mozilla thunderbird 3.1.13
• mozilla thunderbird 3.1.14
• mozilla thunderbird 3.1.15
• mozilla thunderbird 3.1.16
• mozilla thunderbird 3.1.17
• mozilla thunderbird 3.1.2
• mozilla thunderbird 3.1.3
• mozilla thunderbird 3.1.4
• mozilla thunderbird 3.1.5
• mozilla thunderbird 3.1.6
• mozilla thunderbird 3.1.7
• mozilla thunderbird 3.1.8
• mozilla thunderbird 3.1.9
• mozilla thunderbird 5.0
• mozilla thunderbird 6.0
• mozilla thunderbird 6.0.1
• mozilla thunderbird 6.0.2
• mozilla thunderbird 7.0
• mozilla thunderbird 7.0.1
• mozilla thunderbird 8.0
• mozilla thunderbird 9.0
• mozilla thunderbird 9.0.1
• mozilla thunderbird up to 17.0
• mozilla thunderbird_esr 10.0
• mozilla thunderbird_esr 10.0.1
• mozilla thunderbird_esr 10.0.10
• mozilla thunderbird_esr 10.0.11
• mozilla thunderbird_esr 10.0.2
• mozilla thunderbird_esr 10.0.3
• mozilla thunderbird_esr 10.0.4
• mozilla thunderbird_esr 10.0.5
• mozilla thunderbird_esr 10.0.6
• mozilla thunderbird_esr 10.0.7
• mozilla thunderbird_esr 10.0.8
• mozilla thunderbird_esr 10.0.9
• mozilla thunderbird_esr 17.0
• mozilla thunderbird_esr 17.0.1

References

• BugTraq: 57209
• CVE: CVE-2013-0753