Lucene search
Mozilla FoundationMFSA2013-12HistoryJan 08, 2013 - 12:00 a.m.
Buffer overflow in Javascript string concatenation — Mozilla
2013-01-0800:00:00
Mozilla Foundation
www.mozilla.org
34
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.068
Percentile
93.9%
Security researcher pa_kt reported a flaw via TippingPoint’s Zero Day Initiative that an integer overflow is possible when calculating the length for a Javascript string concatenation, which is then used for memory allocation. This results in a buffer overflow, leading to a potentially exploitable memory corruption.
Affected configurations
Node
mozillafirefoxRange<18
ORmozillafirefox_esrRange<10.0.12
ORmozillafirefox_esrRange<17.0.2
ORmozillaseamonkeyRange<2.15
ORmozillathunderbirdRange<17.0.2
ORmozillathunderbird_esrRange<10.0.12
ORmozillathunderbird_esrRange<17.0.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | firefox | * | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* |
| mozilla | firefox_esr | * | cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* |
| mozilla | seamonkey | * | cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:* |
| mozilla | thunderbird | * | cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
| mozilla | thunderbird_esr | * | cpe:2.3:a:mozilla:thunderbird_esr:*:*:*:*:*:*:*:* |
Related
prion
prion
Integer overflow
2013-01-13 20:55:00
ubuntucve
ubuntucve
CVE-2013-0750
2013-01-09 00:00:00
zdi
zdi
cvelist
cvelist
CVE-2013-0750
2013-01-13 20:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-12) - Linux
2021-11-11 00:00:00
Mozilla Products Multiple Vulnerabilities (Jan 2013) - Mac OS X
2013-01-16 00:00:00
Mozilla Products Multiple Vulnerabilities January13 (Windows)
2013-01-16 00:00:00
cve
cve
CVE-2013-0750
2013-01-13 20:55:01
nvd
nvd
CVE-2013-0750
2013-01-13 20:55:01
veracode
veracode
Memory Corruption
2019-05-02 04:45:41
Use-After-Free
2019-05-02 04:45:40
Out-Of-Bounds Read
2019-05-02 04:45:40
nessus
nessus
Oracle Linux 6 : thunderbird (ELSA-2013-0145)
2013-07-12 00:00:00
Scientific Linux Security Update : firefox on SL5.x, SL6.x i386/x86_64 (20130108)
2013-01-11 00:00:00
RHEL 5 / 6 : firefox (RHSA-2013:0144)
2013-01-09 00:00:00
redhat
redhat
(RHSA-2013:0144) Critical: firefox security update
2013-01-08 00:00:00
(RHSA-2013:0145) Critical: thunderbird security update
2013-01-08 00:00:00
oraclelinux
oraclelinux
firefox security update
2013-01-08 00:00:00
thunderbird security update
2013-01-08 00:00:00
centos
centos
firefox, xulrunner security update
2013-01-09 05:51:05
thunderbird security update
2013-01-09 05:51:41
suse
suse
Security update for Mozilla Firefox (important)
2013-02-18 18:04:29
Security update for MozillaFirefox (important)
2013-01-18 19:04:49
Mozilla Januarys (important)
2013-01-23 14:04:54
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-01-08 00:00:00
ubuntu
ubuntu
Firefox regression
2013-01-22 00:00:00
Firefox regression
2013-02-05 00:00:00
Firefox vulnerabilities
2013-01-09 00:00:00
ibm
ibm
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-01-10 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-09-27 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.068
Percentile
93.9%
Related for MFSA2013-12