csaf_redhat - rhsa-2013

rhsa-2013_0821

Vulnerability from csaf_redhat

Published

2013-05-14 18:14

Modified

2024-11-14 13:00

Summary

Red Hat Security Advisory: thunderbird security update

Notes

Topic

An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed content. Malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2013-0801, CVE-2013-1674, CVE-2013-1675, CVE-2013-1676, CVE-2013-1677, CVE-2013-1678, CVE-2013-1679, CVE-2013-1680, CVE-2013-1681) A flaw was found in the way Thunderbird handled Content Level Constructors. Malicious content could use this flaw to perform cross-site scripting (XSS) attacks. (CVE-2013-1670) Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Christoph Diehl, Christian Holler, Jesse Ruderman, Timothy Nikkel, Jeff Walden, Nils, Ms2ger, Abhishek Arya, and Cody Crews as the original reporters of these issues. Note: All of the above issues cannot be exploited by a specially-crafted HTML mail message as JavaScript is disabled by default for mail messages. They could be exploited another way in Thunderbird, for example, when viewing the full remote content of an RSS feed. All Thunderbird users should upgrade to this updated package, which contains Thunderbird version 17.0.6 ESR, which corrects these issues. After installing the update, Thunderbird must be restarted for the changes to take effect.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated thunderbird package that fixes several security issues is now\navailable for Red Hat Enterprise Linux 5 and 6.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSeveral flaws were found in the processing of malformed content. Malicious\ncontent could cause Thunderbird to crash or, potentially, execute arbitrary\ncode with the privileges of the user running Thunderbird. (CVE-2013-0801,\nCVE-2013-1674, CVE-2013-1675, CVE-2013-1676, CVE-2013-1677, CVE-2013-1678,\nCVE-2013-1679, CVE-2013-1680, CVE-2013-1681)\n\nA flaw was found in the way Thunderbird handled Content Level Constructors.\nMalicious content could use this flaw to perform cross-site scripting (XSS)\nattacks. (CVE-2013-1670)\n\nRed Hat would like to thank the Mozilla project for reporting these issues.\nUpstream acknowledges Christoph Diehl, Christian Holler, Jesse Ruderman,\nTimothy Nikkel, Jeff Walden, Nils, Ms2ger, Abhishek Arya, and Cody Crews as\nthe original reporters of these issues.\n\nNote: All of the above issues cannot be exploited by a specially-crafted\nHTML mail message as JavaScript is disabled by default for mail messages.\nThey could be exploited another way in Thunderbird, for example, when\nviewing the full remote content of an RSS feed.\n\nAll Thunderbird users should upgrade to this updated package, which\ncontains Thunderbird version 17.0.6 ESR, which corrects these issues. After\ninstalling the update, Thunderbird must be restarted for the changes to\ntake effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2013:0821",
        "url": "https://access.redhat.com/errata/RHSA-2013:0821"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "962591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=962591"
      },
      {
        "category": "external",
        "summary": "962596",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=962596"
      },
      {
        "category": "external",
        "summary": "962598",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=962598"
      },
      {
        "category": "external",
        "summary": "962601",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=962601"
      },
      {
        "category": "external",
        "summary": "962603",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=962603"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0821.json"
      }
    ],
    "title": "Red Hat Security Advisory: thunderbird security update",
    "tracking": {
      "current_release_date": "2024-11-14T13:00:54+00:00",
      "generator": {
        "date": "2024-11-14T13:00:54+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.0"
        }
      },
      "id": "RHSA-2013:0821",
      "initial_release_date": "2013-05-14T18:14:00+00:00",
      "revision_history": [
        {
          "date": "2013-05-14T18:14:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2013-05-14T20:01:40+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-14T13:00:54+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "RHEL Optional Productivity Applications (v. 5 server)",
                "product": {
                  "name": "RHEL Optional Productivity Applications (v. 5 server)",
                  "product_id": "5Server-DPAS-5.9.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_productivity:5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client-6.4.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                  "product_id": "6Server-optional-6.4.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-6.4.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
                  "product_id": "thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@17.0.6-1.el5_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:17.0.6-1.el5_9.x86_64",
                "product": {
                  "name": "thunderbird-0:17.0.6-1.el5_9.x86_64",
                  "product_id": "thunderbird-0:17.0.6-1.el5_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@17.0.6-1.el5_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
                  "product_id": "thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@17.0.6-2.el6_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:17.0.6-2.el6_4.x86_64",
                "product": {
                  "name": "thunderbird-0:17.0.6-2.el6_4.x86_64",
                  "product_id": "thunderbird-0:17.0.6-2.el6_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@17.0.6-2.el6_4?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
                "product": {
                  "name": "thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
                  "product_id": "thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@17.0.6-1.el5_9?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:17.0.6-1.el5_9.i386",
                "product": {
                  "name": "thunderbird-0:17.0.6-1.el5_9.i386",
                  "product_id": "thunderbird-0:17.0.6-1.el5_9.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@17.0.6-1.el5_9?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:17.0.6-1.el5_9.src",
                "product": {
                  "name": "thunderbird-0:17.0.6-1.el5_9.src",
                  "product_id": "thunderbird-0:17.0.6-1.el5_9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@17.0.6-1.el5_9?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:17.0.6-2.el6_4.src",
                "product": {
                  "name": "thunderbird-0:17.0.6-2.el6_4.src",
                  "product_id": "thunderbird-0:17.0.6-2.el6_4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@17.0.6-2.el6_4?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
                "product": {
                  "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
                  "product_id": "thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@17.0.6-2.el6_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:17.0.6-2.el6_4.s390x",
                "product": {
                  "name": "thunderbird-0:17.0.6-2.el6_4.s390x",
                  "product_id": "thunderbird-0:17.0.6-2.el6_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@17.0.6-2.el6_4?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
                "product": {
                  "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
                  "product_id": "thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@17.0.6-2.el6_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:17.0.6-2.el6_4.i686",
                "product": {
                  "name": "thunderbird-0:17.0.6-2.el6_4.i686",
                  "product_id": "thunderbird-0:17.0.6-2.el6_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@17.0.6-2.el6_4?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
                "product": {
                  "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
                  "product_id": "thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@17.0.6-2.el6_4?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:17.0.6-2.el6_4.ppc64",
                "product": {
                  "name": "thunderbird-0:17.0.6-2.el6_4.ppc64",
                  "product_id": "thunderbird-0:17.0.6-2.el6_4.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@17.0.6-2.el6_4?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:17.0.6-1.el5_9.i386 as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386"
        },
        "product_reference": "thunderbird-0:17.0.6-1.el5_9.i386",
        "relates_to_product_reference": "5Server-DPAS-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:17.0.6-1.el5_9.src as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src"
        },
        "product_reference": "thunderbird-0:17.0.6-1.el5_9.src",
        "relates_to_product_reference": "5Server-DPAS-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:17.0.6-1.el5_9.x86_64 as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64"
        },
        "product_reference": "thunderbird-0:17.0.6-1.el5_9.x86_64",
        "relates_to_product_reference": "5Server-DPAS-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:17.0.6-1.el5_9.i386 as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
        "relates_to_product_reference": "5Server-DPAS-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64 as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
        "relates_to_product_reference": "5Server-DPAS-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:17.0.6-2.el6_4.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686"
        },
        "product_reference": "thunderbird-0:17.0.6-2.el6_4.i686",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:17.0.6-2.el6_4.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64"
        },
        "product_reference": "thunderbird-0:17.0.6-2.el6_4.ppc64",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:17.0.6-2.el6_4.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x"
        },
        "product_reference": "thunderbird-0:17.0.6-2.el6_4.s390x",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:17.0.6-2.el6_4.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src"
        },
        "product_reference": "thunderbird-0:17.0.6-2.el6_4.src",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:17.0.6-2.el6_4.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64"
        },
        "product_reference": "thunderbird-0:17.0.6-2.el6_4.x86_64",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686"
        },
        "product_reference": "thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:17.0.6-2.el6_4.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686"
        },
        "product_reference": "thunderbird-0:17.0.6-2.el6_4.i686",
        "relates_to_product_reference": "6Server-optional-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:17.0.6-2.el6_4.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64"
        },
        "product_reference": "thunderbird-0:17.0.6-2.el6_4.ppc64",
        "relates_to_product_reference": "6Server-optional-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:17.0.6-2.el6_4.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x"
        },
        "product_reference": "thunderbird-0:17.0.6-2.el6_4.s390x",
        "relates_to_product_reference": "6Server-optional-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:17.0.6-2.el6_4.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src"
        },
        "product_reference": "thunderbird-0:17.0.6-2.el6_4.src",
        "relates_to_product_reference": "6Server-optional-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:17.0.6-2.el6_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64"
        },
        "product_reference": "thunderbird-0:17.0.6-2.el6_4.x86_64",
        "relates_to_product_reference": "6Server-optional-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686"
        },
        "product_reference": "thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
        "relates_to_product_reference": "6Server-optional-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
        "relates_to_product_reference": "6Server-optional-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
        "relates_to_product_reference": "6Server-optional-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
        "relates_to_product_reference": "6Server-optional-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:17.0.6-2.el6_4.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686"
        },
        "product_reference": "thunderbird-0:17.0.6-2.el6_4.i686",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:17.0.6-2.el6_4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64"
        },
        "product_reference": "thunderbird-0:17.0.6-2.el6_4.ppc64",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:17.0.6-2.el6_4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x"
        },
        "product_reference": "thunderbird-0:17.0.6-2.el6_4.s390x",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:17.0.6-2.el6_4.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src"
        },
        "product_reference": "thunderbird-0:17.0.6-2.el6_4.src",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:17.0.6-2.el6_4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64"
        },
        "product_reference": "thunderbird-0:17.0.6-2.el6_4.x86_64",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686"
        },
        "product_reference": "thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
        "relates_to_product_reference": "6Workstation-6.4.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        }
      ],
      "cve": "CVE-2013-0801",
      "discovery_date": "2013-05-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "962591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Miscellaneous memory safety hazards (rv:17.0.6) (MFSA 2013-41)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-0801"
        },
        {
          "category": "external",
          "summary": "RHBZ#962591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=962591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0801",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-0801"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0801",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0801"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2013/mfsa2013-41.html",
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-41.html"
        }
      ],
      "release_date": "2013-05-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-05-14T18:14:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0821"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Miscellaneous memory safety hazards (rv:17.0.6) (MFSA 2013-41)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Cody Crews"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2013-1670",
      "discovery_date": "2013-05-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "962596"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Privileged access for content level constructor (MFSA 2013-42)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1670"
        },
        {
          "category": "external",
          "summary": "RHBZ#962596",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=962596"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1670",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1670"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1670",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1670"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2013/mfsa2013-42.html",
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-42.html"
        }
      ],
      "release_date": "2013-05-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-05-14T18:14:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0821"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Privileged access for content level constructor (MFSA 2013-42)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Nils"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2013-1674",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2013-05-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "962598"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code via vectors involving an onresize event during the playing of a video.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free with video and onresize event (MFSA 2013-46)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1674"
        },
        {
          "category": "external",
          "summary": "RHBZ#962598",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=962598"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1674",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1674"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1674",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1674"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2013/mfsa2013-46.html",
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-46.html"
        }
      ],
      "release_date": "2013-05-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-05-14T18:14:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0821"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Use-after-free with video and onresize event (MFSA 2013-46)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Ms2ger"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2013-1675",
      "cwe": {
        "id": "CWE-456",
        "name": "Missing Initialization of a Variable"
      },
      "discovery_date": "2013-05-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "962601"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Uninitialized functions in DOMSVGZoomEvent (MFSA 2013-47)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1675"
        },
        {
          "category": "external",
          "summary": "RHBZ#962601",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=962601"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1675",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1675"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1675",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1675"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2013/mfsa2013-47.html",
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-47.html"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "release_date": "2013-05-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-05-14T18:14:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0821"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "exploit_status",
          "date": "2022-03-03T00:00:00+00:00",
          "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        },
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Uninitialized functions in DOMSVGZoomEvent (MFSA 2013-47)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Abhishek Arya"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2013-1676",
      "discovery_date": "2013-05-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "962603"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The SelectionIterator::GetNextSegment function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1676"
        },
        {
          "category": "external",
          "summary": "RHBZ#962603",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=962603"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1676",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1676"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1676",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1676"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html",
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
        }
      ],
      "release_date": "2013-05-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-05-14T18:14:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0821"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Abhishek Arya"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2013-1677",
      "discovery_date": "2013-05-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "962603"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1677"
        },
        {
          "category": "external",
          "summary": "RHBZ#962603",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=962603"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1677",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1677"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1677",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1677"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html",
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
        }
      ],
      "release_date": "2013-05-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-05-14T18:14:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0821"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Abhishek Arya"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2013-1678",
      "discovery_date": "2013-05-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "962603"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The _cairo_xlib_surface_add_glyph function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (invalid write operation) via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1678"
        },
        {
          "category": "external",
          "summary": "RHBZ#962603",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=962603"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1678",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1678"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1678",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1678"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html",
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
        }
      ],
      "release_date": "2013-05-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-05-14T18:14:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0821"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Abhishek Arya"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2013-1679",
      "discovery_date": "2013-05-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "962603"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the mozilla::plugins::child::_geturlnotify function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1679"
        },
        {
          "category": "external",
          "summary": "RHBZ#962603",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=962603"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1679",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1679"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1679",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1679"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html",
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
        }
      ],
      "release_date": "2013-05-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-05-14T18:14:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0821"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Abhishek Arya"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2013-1680",
      "discovery_date": "2013-05-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "962603"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1680"
        },
        {
          "category": "external",
          "summary": "RHBZ#962603",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=962603"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1680",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1680"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1680",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1680"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html",
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
        }
      ],
      "release_date": "2013-05-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-05-14T18:14:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0821"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Abhishek Arya"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2013-1681",
      "discovery_date": "2013-05-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "962603"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
          "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
          "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
          "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
          "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1681"
        },
        {
          "category": "external",
          "summary": "RHBZ#962603",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=962603"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1681",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1681"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1681",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1681"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html",
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
        }
      ],
      "release_date": "2013-05-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-05-14T18:14:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0821"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.src",
            "5Server-DPAS-5.9.Z:thunderbird-0:17.0.6-1.el5_9.x86_64",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.i386",
            "5Server-DPAS-5.9.Z:thunderbird-debuginfo-0:17.0.6-1.el5_9.x86_64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Client-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Client-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Server-optional-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Server-optional-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.src",
            "6Workstation-6.4.z:thunderbird-0:17.0.6-2.el6_4.x86_64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.i686",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.ppc64",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.s390x",
            "6Workstation-6.4.z:thunderbird-debuginfo-0:17.0.6-2.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48)"
    }
  ]
}

cve-2013-1681

Vulnerability from cvelistv5

Published

2013-05-16 10:00

Modified

2024-08-06 15:13

Severity ?

Summary

Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

References

▼	URL	Tags
	http://www.debian.org/security/2013/dsa-2699	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:165	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1823-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/59862	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2013-0821.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16988	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0820.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=851781	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1822-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2013/mfsa2013-48.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:13:31.612Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-2699",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2013/dsa-2699"
          },
          {
            "name": "MDVSA-2013:165",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
          },
          {
            "name": "openSUSE-SU-2013:0825",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
          },
          {
            "name": "USN-1823-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1823-1"
          },
          {
            "name": "59862",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59862"
          },
          {
            "name": "RHSA-2013:0821",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
          },
          {
            "name": "openSUSE-SU-2013:0929",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16988",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16988"
          },
          {
            "name": "openSUSE-SU-2013:0831",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
          },
          {
            "name": "RHSA-2013:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=851781"
          },
          {
            "name": "openSUSE-SU-2013:0834",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
          },
          {
            "name": "openSUSE-SU-2013:0946",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
          },
          {
            "name": "USN-1822-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1822-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-05-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "DSA-2699",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2013/dsa-2699"
        },
        {
          "name": "MDVSA-2013:165",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
        },
        {
          "name": "openSUSE-SU-2013:0825",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
        },
        {
          "name": "USN-1823-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1823-1"
        },
        {
          "name": "59862",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59862"
        },
        {
          "name": "RHSA-2013:0821",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
        },
        {
          "name": "openSUSE-SU-2013:0929",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16988",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16988"
        },
        {
          "name": "openSUSE-SU-2013:0831",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
        },
        {
          "name": "RHSA-2013:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=851781"
        },
        {
          "name": "openSUSE-SU-2013:0834",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
        },
        {
          "name": "openSUSE-SU-2013:0946",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
        },
        {
          "name": "USN-1822-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1822-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2013-1681",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-2699",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2013/dsa-2699"
            },
            {
              "name": "MDVSA-2013:165",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
            },
            {
              "name": "openSUSE-SU-2013:0825",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
            },
            {
              "name": "USN-1823-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1823-1"
            },
            {
              "name": "59862",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59862"
            },
            {
              "name": "RHSA-2013:0821",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
            },
            {
              "name": "openSUSE-SU-2013:0929",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16988",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16988"
            },
            {
              "name": "openSUSE-SU-2013:0831",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
            },
            {
              "name": "RHSA-2013:0820",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=851781",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=851781"
            },
            {
              "name": "openSUSE-SU-2013:0834",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
            },
            {
              "name": "openSUSE-SU-2013:0946",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
            },
            {
              "name": "USN-1822-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1822-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2013-1681",
    "datePublished": "2013-05-16T10:00:00",
    "dateReserved": "2013-02-13T00:00:00",
    "dateUpdated": "2024-08-06T15:13:31.612Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-1679

Vulnerability from cvelistv5

Published

2013-05-16 10:00

Modified

2024-08-06 15:13

Severity ?

Summary

Use-after-free vulnerability in the mozilla::plugins::child::_geturlnotify function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

References

▼	URL	Tags
	http://www.debian.org/security/2013/dsa-2699	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:165	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=848237	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1823-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17085	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/59860	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2013-0821.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0820.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1822-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2013/mfsa2013-48.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:13:32.418Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-2699",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2013/dsa-2699"
          },
          {
            "name": "MDVSA-2013:165",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
          },
          {
            "name": "openSUSE-SU-2013:0825",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=848237"
          },
          {
            "name": "USN-1823-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1823-1"
          },
          {
            "name": "oval:org.mitre.oval:def:17085",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17085"
          },
          {
            "name": "59860",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59860"
          },
          {
            "name": "RHSA-2013:0821",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
          },
          {
            "name": "openSUSE-SU-2013:0929",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
          },
          {
            "name": "openSUSE-SU-2013:0831",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
          },
          {
            "name": "RHSA-2013:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
          },
          {
            "name": "openSUSE-SU-2013:0834",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
          },
          {
            "name": "openSUSE-SU-2013:0946",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
          },
          {
            "name": "USN-1822-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1822-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-05-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the mozilla::plugins::child::_geturlnotify function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "DSA-2699",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2013/dsa-2699"
        },
        {
          "name": "MDVSA-2013:165",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
        },
        {
          "name": "openSUSE-SU-2013:0825",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=848237"
        },
        {
          "name": "USN-1823-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1823-1"
        },
        {
          "name": "oval:org.mitre.oval:def:17085",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17085"
        },
        {
          "name": "59860",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59860"
        },
        {
          "name": "RHSA-2013:0821",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
        },
        {
          "name": "openSUSE-SU-2013:0929",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
        },
        {
          "name": "openSUSE-SU-2013:0831",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
        },
        {
          "name": "RHSA-2013:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
        },
        {
          "name": "openSUSE-SU-2013:0834",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
        },
        {
          "name": "openSUSE-SU-2013:0946",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
        },
        {
          "name": "USN-1822-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1822-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2013-1679",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the mozilla::plugins::child::_geturlnotify function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-2699",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2013/dsa-2699"
            },
            {
              "name": "MDVSA-2013:165",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
            },
            {
              "name": "openSUSE-SU-2013:0825",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=848237",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=848237"
            },
            {
              "name": "USN-1823-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1823-1"
            },
            {
              "name": "oval:org.mitre.oval:def:17085",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17085"
            },
            {
              "name": "59860",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59860"
            },
            {
              "name": "RHSA-2013:0821",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
            },
            {
              "name": "openSUSE-SU-2013:0929",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
            },
            {
              "name": "openSUSE-SU-2013:0831",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
            },
            {
              "name": "RHSA-2013:0820",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
            },
            {
              "name": "openSUSE-SU-2013:0834",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
            },
            {
              "name": "openSUSE-SU-2013:0946",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
            },
            {
              "name": "USN-1822-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1822-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2013-1679",
    "datePublished": "2013-05-16T10:00:00",
    "dateReserved": "2013-02-13T00:00:00",
    "dateUpdated": "2024-08-06T15:13:32.418Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-1680

Vulnerability from cvelistv5

Published

2013-05-16 10:00

Modified

2024-08-06 15:13

Severity ?

Summary

Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

References

▼	URL	Tags
	http://www.debian.org/security/2013/dsa-2699	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:165	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1823-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-0821.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/59861	vdb-entry, x_refsource_BID
	https://bugzilla.mozilla.org/show_bug.cgi?id=850931	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0820.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17031	vdb-entry, signature, x_refsource_OVAL
	http://www.ubuntu.com/usn/USN-1822-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2013/mfsa2013-48.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:13:32.293Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-2699",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2013/dsa-2699"
          },
          {
            "name": "MDVSA-2013:165",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
          },
          {
            "name": "openSUSE-SU-2013:0825",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
          },
          {
            "name": "USN-1823-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1823-1"
          },
          {
            "name": "RHSA-2013:0821",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
          },
          {
            "name": "openSUSE-SU-2013:0929",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
          },
          {
            "name": "openSUSE-SU-2013:0831",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
          },
          {
            "name": "59861",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59861"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=850931"
          },
          {
            "name": "RHSA-2013:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
          },
          {
            "name": "openSUSE-SU-2013:0834",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
          },
          {
            "name": "openSUSE-SU-2013:0946",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
          },
          {
            "name": "oval:org.mitre.oval:def:17031",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17031"
          },
          {
            "name": "USN-1822-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1822-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-05-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "DSA-2699",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2013/dsa-2699"
        },
        {
          "name": "MDVSA-2013:165",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
        },
        {
          "name": "openSUSE-SU-2013:0825",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
        },
        {
          "name": "USN-1823-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1823-1"
        },
        {
          "name": "RHSA-2013:0821",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
        },
        {
          "name": "openSUSE-SU-2013:0929",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
        },
        {
          "name": "openSUSE-SU-2013:0831",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
        },
        {
          "name": "59861",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59861"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=850931"
        },
        {
          "name": "RHSA-2013:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
        },
        {
          "name": "openSUSE-SU-2013:0834",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
        },
        {
          "name": "openSUSE-SU-2013:0946",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
        },
        {
          "name": "oval:org.mitre.oval:def:17031",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17031"
        },
        {
          "name": "USN-1822-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1822-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2013-1680",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-2699",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2013/dsa-2699"
            },
            {
              "name": "MDVSA-2013:165",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
            },
            {
              "name": "openSUSE-SU-2013:0825",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
            },
            {
              "name": "USN-1823-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1823-1"
            },
            {
              "name": "RHSA-2013:0821",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
            },
            {
              "name": "openSUSE-SU-2013:0929",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
            },
            {
              "name": "openSUSE-SU-2013:0831",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
            },
            {
              "name": "59861",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59861"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=850931",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=850931"
            },
            {
              "name": "RHSA-2013:0820",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
            },
            {
              "name": "openSUSE-SU-2013:0834",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
            },
            {
              "name": "openSUSE-SU-2013:0946",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
            },
            {
              "name": "oval:org.mitre.oval:def:17031",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17031"
            },
            {
              "name": "USN-1822-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1822-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2013-1680",
    "datePublished": "2013-05-16T10:00:00",
    "dateReserved": "2013-02-13T00:00:00",
    "dateUpdated": "2024-08-06T15:13:32.293Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-1676

Vulnerability from cvelistv5

Published

2013-05-16 10:00

Modified

2024-08-06 15:13

Severity ?

Summary

The SelectionIterator::GetNextSegment function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.

References

▼	URL	Tags
	http://www.debian.org/security/2013/dsa-2699	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:165	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1823-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-0821.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/59863	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=818454	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0820.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16956	vdb-entry, signature, x_refsource_OVAL
	http://www.ubuntu.com/usn/USN-1822-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2013/mfsa2013-48.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:13:32.211Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-2699",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2013/dsa-2699"
          },
          {
            "name": "MDVSA-2013:165",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
          },
          {
            "name": "openSUSE-SU-2013:0825",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
          },
          {
            "name": "USN-1823-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1823-1"
          },
          {
            "name": "RHSA-2013:0821",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
          },
          {
            "name": "openSUSE-SU-2013:0929",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
          },
          {
            "name": "59863",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59863"
          },
          {
            "name": "openSUSE-SU-2013:0831",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=818454"
          },
          {
            "name": "RHSA-2013:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
          },
          {
            "name": "openSUSE-SU-2013:0834",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
          },
          {
            "name": "openSUSE-SU-2013:0946",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16956",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16956"
          },
          {
            "name": "USN-1822-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1822-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-05-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The SelectionIterator::GetNextSegment function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "DSA-2699",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2013/dsa-2699"
        },
        {
          "name": "MDVSA-2013:165",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
        },
        {
          "name": "openSUSE-SU-2013:0825",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
        },
        {
          "name": "USN-1823-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1823-1"
        },
        {
          "name": "RHSA-2013:0821",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
        },
        {
          "name": "openSUSE-SU-2013:0929",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
        },
        {
          "name": "59863",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59863"
        },
        {
          "name": "openSUSE-SU-2013:0831",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=818454"
        },
        {
          "name": "RHSA-2013:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
        },
        {
          "name": "openSUSE-SU-2013:0834",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
        },
        {
          "name": "openSUSE-SU-2013:0946",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16956",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16956"
        },
        {
          "name": "USN-1822-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1822-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2013-1676",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The SelectionIterator::GetNextSegment function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-2699",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2013/dsa-2699"
            },
            {
              "name": "MDVSA-2013:165",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
            },
            {
              "name": "openSUSE-SU-2013:0825",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
            },
            {
              "name": "USN-1823-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1823-1"
            },
            {
              "name": "RHSA-2013:0821",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
            },
            {
              "name": "openSUSE-SU-2013:0929",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
            },
            {
              "name": "59863",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59863"
            },
            {
              "name": "openSUSE-SU-2013:0831",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=818454",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=818454"
            },
            {
              "name": "RHSA-2013:0820",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
            },
            {
              "name": "openSUSE-SU-2013:0834",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
            },
            {
              "name": "openSUSE-SU-2013:0946",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16956",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16956"
            },
            {
              "name": "USN-1822-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1822-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2013-1676",
    "datePublished": "2013-05-16T10:00:00",
    "dateReserved": "2013-02-13T00:00:00",
    "dateUpdated": "2024-08-06T15:13:32.211Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-1677

Vulnerability from cvelistv5

Published

2013-05-16 10:00

Modified

2024-08-06 15:13

Severity ?

Summary

The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=826163	x_refsource_CONFIRM
	http://www.debian.org/security/2013/dsa-2699	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:165	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1823-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16979	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-0821.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0820.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1822-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/59868	vdb-entry, x_refsource_BID
	http://www.mozilla.org/security/announce/2013/mfsa2013-48.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:13:32.492Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=826163"
          },
          {
            "name": "DSA-2699",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2013/dsa-2699"
          },
          {
            "name": "MDVSA-2013:165",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
          },
          {
            "name": "openSUSE-SU-2013:0825",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
          },
          {
            "name": "USN-1823-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1823-1"
          },
          {
            "name": "oval:org.mitre.oval:def:16979",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16979"
          },
          {
            "name": "RHSA-2013:0821",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
          },
          {
            "name": "openSUSE-SU-2013:0929",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
          },
          {
            "name": "openSUSE-SU-2013:0831",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
          },
          {
            "name": "RHSA-2013:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
          },
          {
            "name": "openSUSE-SU-2013:0834",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
          },
          {
            "name": "openSUSE-SU-2013:0946",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
          },
          {
            "name": "USN-1822-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1822-1"
          },
          {
            "name": "59868",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59868"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-05-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=826163"
        },
        {
          "name": "DSA-2699",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2013/dsa-2699"
        },
        {
          "name": "MDVSA-2013:165",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
        },
        {
          "name": "openSUSE-SU-2013:0825",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
        },
        {
          "name": "USN-1823-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1823-1"
        },
        {
          "name": "oval:org.mitre.oval:def:16979",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16979"
        },
        {
          "name": "RHSA-2013:0821",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
        },
        {
          "name": "openSUSE-SU-2013:0929",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
        },
        {
          "name": "openSUSE-SU-2013:0831",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
        },
        {
          "name": "RHSA-2013:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
        },
        {
          "name": "openSUSE-SU-2013:0834",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
        },
        {
          "name": "openSUSE-SU-2013:0946",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
        },
        {
          "name": "USN-1822-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1822-1"
        },
        {
          "name": "59868",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59868"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2013-1677",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=826163",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=826163"
            },
            {
              "name": "DSA-2699",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2013/dsa-2699"
            },
            {
              "name": "MDVSA-2013:165",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
            },
            {
              "name": "openSUSE-SU-2013:0825",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
            },
            {
              "name": "USN-1823-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1823-1"
            },
            {
              "name": "oval:org.mitre.oval:def:16979",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16979"
            },
            {
              "name": "RHSA-2013:0821",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
            },
            {
              "name": "openSUSE-SU-2013:0929",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
            },
            {
              "name": "openSUSE-SU-2013:0831",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
            },
            {
              "name": "RHSA-2013:0820",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
            },
            {
              "name": "openSUSE-SU-2013:0834",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
            },
            {
              "name": "openSUSE-SU-2013:0946",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
            },
            {
              "name": "USN-1822-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1822-1"
            },
            {
              "name": "59868",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59868"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2013-1677",
    "datePublished": "2013-05-16T10:00:00",
    "dateReserved": "2013-02-13T00:00:00",
    "dateUpdated": "2024-08-06T15:13:32.492Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-0801

Vulnerability from cvelistv5

Published

2013-05-16 10:00

Modified

2024-08-06 14:41

Severity ?

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

▼	URL	Tags
	http://www.debian.org/security/2013/dsa-2699	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:165	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1823-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=866544	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-0821.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2013/mfsa2013-41.html	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17062	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=864558	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/59855	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2013-0820.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=852315	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=808402	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1822-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=849597	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=787283	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T14:41:47.114Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-2699",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2013/dsa-2699"
          },
          {
            "name": "MDVSA-2013:165",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
          },
          {
            "name": "openSUSE-SU-2013:0825",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
          },
          {
            "name": "USN-1823-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1823-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=866544"
          },
          {
            "name": "RHSA-2013:0821",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
          },
          {
            "name": "openSUSE-SU-2013:0929",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-41.html"
          },
          {
            "name": "oval:org.mitre.oval:def:17062",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17062"
          },
          {
            "name": "openSUSE-SU-2013:0831",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=864558"
          },
          {
            "name": "59855",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59855"
          },
          {
            "name": "RHSA-2013:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=852315"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=808402"
          },
          {
            "name": "openSUSE-SU-2013:0834",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
          },
          {
            "name": "openSUSE-SU-2013:0946",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
          },
          {
            "name": "USN-1822-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1822-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=849597"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=787283"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-05-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "DSA-2699",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2013/dsa-2699"
        },
        {
          "name": "MDVSA-2013:165",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
        },
        {
          "name": "openSUSE-SU-2013:0825",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
        },
        {
          "name": "USN-1823-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1823-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=866544"
        },
        {
          "name": "RHSA-2013:0821",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
        },
        {
          "name": "openSUSE-SU-2013:0929",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-41.html"
        },
        {
          "name": "oval:org.mitre.oval:def:17062",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17062"
        },
        {
          "name": "openSUSE-SU-2013:0831",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=864558"
        },
        {
          "name": "59855",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59855"
        },
        {
          "name": "RHSA-2013:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=852315"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=808402"
        },
        {
          "name": "openSUSE-SU-2013:0834",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
        },
        {
          "name": "openSUSE-SU-2013:0946",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
        },
        {
          "name": "USN-1822-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1822-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=849597"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=787283"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2013-0801",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-2699",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2013/dsa-2699"
            },
            {
              "name": "MDVSA-2013:165",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
            },
            {
              "name": "openSUSE-SU-2013:0825",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
            },
            {
              "name": "USN-1823-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1823-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=866544",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=866544"
            },
            {
              "name": "RHSA-2013:0821",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
            },
            {
              "name": "openSUSE-SU-2013:0929",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2013/mfsa2013-41.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-41.html"
            },
            {
              "name": "oval:org.mitre.oval:def:17062",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17062"
            },
            {
              "name": "openSUSE-SU-2013:0831",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=864558",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=864558"
            },
            {
              "name": "59855",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59855"
            },
            {
              "name": "RHSA-2013:0820",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=852315",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=852315"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=808402",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=808402"
            },
            {
              "name": "openSUSE-SU-2013:0834",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
            },
            {
              "name": "openSUSE-SU-2013:0946",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
            },
            {
              "name": "USN-1822-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1822-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=849597",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=849597"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=787283",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=787283"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2013-0801",
    "datePublished": "2013-05-16T10:00:00",
    "dateReserved": "2013-01-02T00:00:00",
    "dateUpdated": "2024-08-06T14:41:47.114Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-1678

Vulnerability from cvelistv5

Published

2013-05-16 10:00

Modified

2024-08-06 15:13

Severity ?

Summary

The _cairo_xlib_surface_add_glyph function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (invalid write operation) via unspecified vectors.

References

▼	URL	Tags
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16577	vdb-entry, signature, x_refsource_OVAL
	http://www.debian.org/security/2013/dsa-2699	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:165	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1823-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-0821.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=839745	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0820.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1822-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/59864	vdb-entry, x_refsource_BID
	http://www.mozilla.org/security/announce/2013/mfsa2013-48.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:13:32.753Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:16577",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16577"
          },
          {
            "name": "DSA-2699",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2013/dsa-2699"
          },
          {
            "name": "MDVSA-2013:165",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
          },
          {
            "name": "openSUSE-SU-2013:0825",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
          },
          {
            "name": "USN-1823-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1823-1"
          },
          {
            "name": "RHSA-2013:0821",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
          },
          {
            "name": "openSUSE-SU-2013:0929",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=839745"
          },
          {
            "name": "openSUSE-SU-2013:0831",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
          },
          {
            "name": "RHSA-2013:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
          },
          {
            "name": "openSUSE-SU-2013:0834",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
          },
          {
            "name": "openSUSE-SU-2013:0946",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
          },
          {
            "name": "USN-1822-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1822-1"
          },
          {
            "name": "59864",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59864"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-05-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The _cairo_xlib_surface_add_glyph function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (invalid write operation) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:16577",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16577"
        },
        {
          "name": "DSA-2699",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2013/dsa-2699"
        },
        {
          "name": "MDVSA-2013:165",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
        },
        {
          "name": "openSUSE-SU-2013:0825",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
        },
        {
          "name": "USN-1823-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1823-1"
        },
        {
          "name": "RHSA-2013:0821",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
        },
        {
          "name": "openSUSE-SU-2013:0929",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=839745"
        },
        {
          "name": "openSUSE-SU-2013:0831",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
        },
        {
          "name": "RHSA-2013:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
        },
        {
          "name": "openSUSE-SU-2013:0834",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
        },
        {
          "name": "openSUSE-SU-2013:0946",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
        },
        {
          "name": "USN-1822-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1822-1"
        },
        {
          "name": "59864",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59864"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2013-1678",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The _cairo_xlib_surface_add_glyph function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (invalid write operation) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:16577",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16577"
            },
            {
              "name": "DSA-2699",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2013/dsa-2699"
            },
            {
              "name": "MDVSA-2013:165",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
            },
            {
              "name": "openSUSE-SU-2013:0825",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
            },
            {
              "name": "USN-1823-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1823-1"
            },
            {
              "name": "RHSA-2013:0821",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
            },
            {
              "name": "openSUSE-SU-2013:0929",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=839745",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=839745"
            },
            {
              "name": "openSUSE-SU-2013:0831",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
            },
            {
              "name": "RHSA-2013:0820",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
            },
            {
              "name": "openSUSE-SU-2013:0834",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
            },
            {
              "name": "openSUSE-SU-2013:0946",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
            },
            {
              "name": "USN-1822-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1822-1"
            },
            {
              "name": "59864",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59864"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-48.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2013-1678",
    "datePublished": "2013-05-16T10:00:00",
    "dateReserved": "2013-02-13T00:00:00",
    "dateUpdated": "2024-08-06T15:13:32.753Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-1674

Vulnerability from cvelistv5

Published

2013-05-16 10:00

Modified

2024-08-06 15:13

Severity ?

Summary

Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code via vectors involving an onresize event during the playing of a video.

References

▼	URL	Tags
	http://www.debian.org/security/2013/dsa-2699	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:165	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=860971	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1823-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17147	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2013-0821.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2013/mfsa2013-46.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/59859	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0820.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1822-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:13:31.590Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-2699",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2013/dsa-2699"
          },
          {
            "name": "MDVSA-2013:165",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
          },
          {
            "name": "openSUSE-SU-2013:0825",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=860971"
          },
          {
            "name": "USN-1823-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1823-1"
          },
          {
            "name": "oval:org.mitre.oval:def:17147",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17147"
          },
          {
            "name": "RHSA-2013:0821",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
          },
          {
            "name": "openSUSE-SU-2013:0929",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-46.html"
          },
          {
            "name": "59859",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59859"
          },
          {
            "name": "openSUSE-SU-2013:0831",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
          },
          {
            "name": "RHSA-2013:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
          },
          {
            "name": "openSUSE-SU-2013:0834",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
          },
          {
            "name": "openSUSE-SU-2013:0946",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
          },
          {
            "name": "USN-1822-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1822-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-05-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code via vectors involving an onresize event during the playing of a video."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "DSA-2699",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2013/dsa-2699"
        },
        {
          "name": "MDVSA-2013:165",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
        },
        {
          "name": "openSUSE-SU-2013:0825",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=860971"
        },
        {
          "name": "USN-1823-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1823-1"
        },
        {
          "name": "oval:org.mitre.oval:def:17147",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17147"
        },
        {
          "name": "RHSA-2013:0821",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
        },
        {
          "name": "openSUSE-SU-2013:0929",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-46.html"
        },
        {
          "name": "59859",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59859"
        },
        {
          "name": "openSUSE-SU-2013:0831",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
        },
        {
          "name": "RHSA-2013:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
        },
        {
          "name": "openSUSE-SU-2013:0834",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
        },
        {
          "name": "openSUSE-SU-2013:0946",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
        },
        {
          "name": "USN-1822-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1822-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2013-1674",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code via vectors involving an onresize event during the playing of a video."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-2699",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2013/dsa-2699"
            },
            {
              "name": "MDVSA-2013:165",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
            },
            {
              "name": "openSUSE-SU-2013:0825",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=860971",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=860971"
            },
            {
              "name": "USN-1823-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1823-1"
            },
            {
              "name": "oval:org.mitre.oval:def:17147",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17147"
            },
            {
              "name": "RHSA-2013:0821",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
            },
            {
              "name": "openSUSE-SU-2013:0929",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2013/mfsa2013-46.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-46.html"
            },
            {
              "name": "59859",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59859"
            },
            {
              "name": "openSUSE-SU-2013:0831",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
            },
            {
              "name": "RHSA-2013:0820",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
            },
            {
              "name": "openSUSE-SU-2013:0834",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
            },
            {
              "name": "openSUSE-SU-2013:0946",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
            },
            {
              "name": "USN-1822-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1822-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2013-1674",
    "datePublished": "2013-05-16T10:00:00",
    "dateReserved": "2013-02-13T00:00:00",
    "dateUpdated": "2024-08-06T15:13:31.590Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-1670

Vulnerability from cvelistv5

Published

2013-05-16 10:00

Modified

2024-08-06 15:13

Severity ?

Summary

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.

References

▼	URL	Tags
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17046	vdb-entry, signature, x_refsource_OVAL
	http://www.debian.org/security/2013/dsa-2699	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:165	vendor-advisory, x_refsource_MANDRIVA
	https://bugzilla.mozilla.org/show_bug.cgi?id=853709	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2013/mfsa2013-42.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1823-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-0821.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.osvdb.org/93427	vdb-entry, x_refsource_OSVDB
	http://www.exploit-db.com/exploits/34363	exploit, x_refsource_EXPLOIT-DB
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/59865	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2013-0820.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1822-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:13:31.673Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:17046",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17046"
          },
          {
            "name": "DSA-2699",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2013/dsa-2699"
          },
          {
            "name": "MDVSA-2013:165",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=853709"
          },
          {
            "name": "openSUSE-SU-2013:0825",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-42.html"
          },
          {
            "name": "USN-1823-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1823-1"
          },
          {
            "name": "RHSA-2013:0821",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
          },
          {
            "name": "openSUSE-SU-2013:0929",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
          },
          {
            "name": "93427",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/93427"
          },
          {
            "name": "34363",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "http://www.exploit-db.com/exploits/34363"
          },
          {
            "name": "openSUSE-SU-2013:0831",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
          },
          {
            "name": "59865",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59865"
          },
          {
            "name": "RHSA-2013:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
          },
          {
            "name": "openSUSE-SU-2013:0834",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
          },
          {
            "name": "openSUSE-SU-2013:0946",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
          },
          {
            "name": "USN-1822-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1822-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-05-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:17046",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17046"
        },
        {
          "name": "DSA-2699",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2013/dsa-2699"
        },
        {
          "name": "MDVSA-2013:165",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=853709"
        },
        {
          "name": "openSUSE-SU-2013:0825",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-42.html"
        },
        {
          "name": "USN-1823-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1823-1"
        },
        {
          "name": "RHSA-2013:0821",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
        },
        {
          "name": "openSUSE-SU-2013:0929",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
        },
        {
          "name": "93427",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/93427"
        },
        {
          "name": "34363",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "http://www.exploit-db.com/exploits/34363"
        },
        {
          "name": "openSUSE-SU-2013:0831",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
        },
        {
          "name": "59865",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59865"
        },
        {
          "name": "RHSA-2013:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
        },
        {
          "name": "openSUSE-SU-2013:0834",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
        },
        {
          "name": "openSUSE-SU-2013:0946",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
        },
        {
          "name": "USN-1822-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1822-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2013-1670",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:17046",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17046"
            },
            {
              "name": "DSA-2699",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2013/dsa-2699"
            },
            {
              "name": "MDVSA-2013:165",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=853709",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=853709"
            },
            {
              "name": "openSUSE-SU-2013:0825",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2013/mfsa2013-42.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-42.html"
            },
            {
              "name": "USN-1823-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1823-1"
            },
            {
              "name": "RHSA-2013:0821",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
            },
            {
              "name": "openSUSE-SU-2013:0929",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
            },
            {
              "name": "93427",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/93427"
            },
            {
              "name": "34363",
              "refsource": "EXPLOIT-DB",
              "url": "http://www.exploit-db.com/exploits/34363"
            },
            {
              "name": "openSUSE-SU-2013:0831",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
            },
            {
              "name": "59865",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59865"
            },
            {
              "name": "RHSA-2013:0820",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
            },
            {
              "name": "openSUSE-SU-2013:0834",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
            },
            {
              "name": "openSUSE-SU-2013:0946",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
            },
            {
              "name": "USN-1822-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1822-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2013-1670",
    "datePublished": "2013-05-16T10:00:00",
    "dateReserved": "2013-02-13T00:00:00",
    "dateUpdated": "2024-08-06T15:13:31.673Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-1675

Vulnerability from cvelistv5

Published

2013-05-16 10:00

Modified

2024-08-06 15:13

Severity ?

Summary

Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.

References

▼	URL	Tags
	http://www.debian.org/security/2013/dsa-2699	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:165	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=866825	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1823-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-0821.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2013/mfsa2013-47.html	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16976	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0820.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/59858	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/USN-1822-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:13:32.387Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-2699",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2013/dsa-2699"
          },
          {
            "name": "MDVSA-2013:165",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
          },
          {
            "name": "openSUSE-SU-2013:0825",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=866825"
          },
          {
            "name": "USN-1823-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1823-1"
          },
          {
            "name": "RHSA-2013:0821",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
          },
          {
            "name": "openSUSE-SU-2013:0929",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-47.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16976",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16976"
          },
          {
            "name": "openSUSE-SU-2013:0831",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
          },
          {
            "name": "RHSA-2013:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
          },
          {
            "name": "openSUSE-SU-2013:0834",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
          },
          {
            "name": "openSUSE-SU-2013:0946",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
          },
          {
            "name": "59858",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/59858"
          },
          {
            "name": "USN-1822-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1822-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-05-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "DSA-2699",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2013/dsa-2699"
        },
        {
          "name": "MDVSA-2013:165",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
        },
        {
          "name": "openSUSE-SU-2013:0825",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=866825"
        },
        {
          "name": "USN-1823-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1823-1"
        },
        {
          "name": "RHSA-2013:0821",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
        },
        {
          "name": "openSUSE-SU-2013:0929",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-47.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16976",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16976"
        },
        {
          "name": "openSUSE-SU-2013:0831",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
        },
        {
          "name": "RHSA-2013:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
        },
        {
          "name": "openSUSE-SU-2013:0834",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
        },
        {
          "name": "openSUSE-SU-2013:0946",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
        },
        {
          "name": "59858",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/59858"
        },
        {
          "name": "USN-1822-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1822-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2013-1675",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-2699",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2013/dsa-2699"
            },
            {
              "name": "MDVSA-2013:165",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:165"
            },
            {
              "name": "openSUSE-SU-2013:0825",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=866825",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=866825"
            },
            {
              "name": "USN-1823-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1823-1"
            },
            {
              "name": "RHSA-2013:0821",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0821.html"
            },
            {
              "name": "openSUSE-SU-2013:0929",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2013/mfsa2013-47.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-47.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16976",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16976"
            },
            {
              "name": "openSUSE-SU-2013:0831",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html"
            },
            {
              "name": "RHSA-2013:0820",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0820.html"
            },
            {
              "name": "openSUSE-SU-2013:0834",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html"
            },
            {
              "name": "openSUSE-SU-2013:0946",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html"
            },
            {
              "name": "59858",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/59858"
            },
            {
              "name": "USN-1822-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1822-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2013-1675",
    "datePublished": "2013-05-16T10:00:00",
    "dateReserved": "2013-02-13T00:00:00",
    "dateUpdated": "2024-08-06T15:13:32.387Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature