CVE:CVE-2013-0755
CNNVD:CNNVD-201301-147
Mozilla Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。Thunderbird是美国Mozilla基金会开发的从Mozilla Application Suite独立出来的电子邮件客户端软件，支持IMAP、POP邮件协议以及HTML邮件格式。Mozilla SeaMonkey是美国Mozilla基金会开发的一个免费、开源以及跨平台的网络套装软件。
Mozilla Firefox/SeaMonkey/Thunderbird的Vibrate库使用domDoc指针中存在一个释放后使用漏洞，可导致远程代码执行。以下版本中已修复：Firefox 18.0、Firefox ESR 10.0.12、Firefox ESR 17.0.2、Thunderbird 17.0.2、Thunderbird ESR 10.0.12、Thunderbird ESR 17.0.2 SeaMonkey 2.15版本。
solution:Upgrade mozilla firefox to a higher version than 18.0,and avoid the version (,18.0); Upgrade mozilla firefox_esr to a higher version than 17.0.2,and avoid the version (,17.0.2); Upgrade mozilla seamonkey to a higher version than 2.15,and avoid the version (,2.15); Upgrade mozilla thunderbird to a higher version than 17.0.2,and avoid the version (,17.0.2); Upgrade mozilla thunderbird_esr to a higher version than 17.0.2,and avoid the version (,17.0.2); Upgrade opensuse opensuse to a higher version than 11.4,12.1,12.2,and avoid the version 11.4,12.1,12.2; Upgrade suse linux_enterprise_desktop to a higher version than 10:sp4,11:sp2,and avoid the version 10:sp4,11:sp2; Upgrade suse linux_enterprise_server to a higher version than 10:sp4,11:sp2,and avoid the version 10:sp4,11:sp2; Upgrade suse linux_enterprise_software_development_kit to a higher version than 10:sp4,11:sp2,and avoid the version 10:sp4,11:sp2; Upgrade canonical ubuntu_linux to a higher version than 10.04,11.10,12.04,12.10,and avoid the version 10.04,11.10,12.04,12.10