critical10.0
CVE-2013-5591
Unspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.2…
Impact
Unspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | through 24.0 Versions 19.0, 19.0.1, 19.0.2, 20.0, 20.0.1 |
| Mozilla | Thunderbird | through 24.0.1 Versions 17.0, 17.0.1, 17.0.2, 17.0.3, 17.0.4 |
| Mozilla | Thunderbird Esr | Version 17.0.9 |
| Mozilla | Seamonkey | through 2.22 Versions 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4 |
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html
- http://www.mozilla.org/security/announce/2013/mfsa2013-93.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=859892
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19015
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html
- http://www.mozilla.org/security/announce/2013/mfsa2013-93.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=859892
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19015
- https://security.gentoo.org/glsa/201504-01