Lucene search
Mozilla FoundationMFSA2013-96HistoryOct 29, 2013 - 12:00 a.m.
Improperly initialized memory and overflows in some JavaScript functions — Mozilla
2013-10-2900:00:00
Mozilla Foundation
www.mozilla.org
28
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
0.011
Percentile
84.8%
Compiler Engineer Dan Gohman of Google discovered a flaw in the JavaScript engine where memory was being incorrectly allocated for some functions and the calls for allocations were not always properly checked for overflow, leading to potential buffer overflows. When combined with other vulnerabilities, these flaws could be potentially exploitable.
Affected configurations
Node
mozillafirefoxRange<25
ORmozillafirefox_esrRange<17.0.10
ORmozillafirefox_esrRange<24.1
ORmozillaseamonkeyRange<2.22
ORmozillathunderbirdRange<24.1
ORmozillathunderbird_esrRange<17.0.10
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | firefox | * | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* |
| mozilla | firefox_esr | * | cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* |
| mozilla | seamonkey | * | cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:* |
| mozilla | thunderbird | * | cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
| mozilla | thunderbird_esr | * | cpe:2.3:a:mozilla:thunderbird_esr:*:*:*:*:*:*:*:* |
Related
prion
prion
Buffer overflow
2013-10-30 10:55:00
nvd
nvd
CVE-2013-5595
2013-10-30 10:55:04
cve
cve
CVE-2013-5595
2013-10-30 10:55:04
cvelist
cvelist
CVE-2013-5595
2013-10-30 10:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-96) - Linux
2021-11-11 00:00:00
CentOS Update for firefox CESA-2013:1476 centos6
2013-11-08 00:00:00
CentOS Update for thunderbird CESA-2013:1480 centos5
2013-11-08 00:00:00
ubuntucve
ubuntucve
CVE-2013-5595
2013-10-29 00:00:00
nessus
nessus
Debian DSA-2788-1 : iceweasel - several vulnerabilities
2013-11-01 00:00:00
veracode
veracode
Memory Corruption
2019-05-02 04:56:51
Buffer Overflow
2019-05-02 04:56:49
Denial Of Service (DOS)
2019-05-02 04:56:49
oraclelinux
oraclelinux
firefox security update
2013-10-29 00:00:00
thunderbird security update
2013-10-30 00:00:00
debian
debian
[SECURITY] [DSA 2788-1] iceweasel security update
2013-10-31 08:03:44
[SECURITY] [DSA 2797-1] icedove security update
2013-11-13 21:44:43
centos
centos
firefox, xulrunner security update
2013-10-30 04:12:01
thunderbird security update
2013-10-30 22:19:56
redhat
redhat
(RHSA-2013:1476) Critical: firefox security update
2013-10-29 00:00:00
(RHSA-2013:1480) Important: thunderbird security update
2013-10-30 00:00:00
mageia
mageia
Updated thunderbird package fixes security vulnerabilities
2013-11-18 18:39:59
Updated firefox & related packages fix multiple security vulnerabilities
2013-11-09 22:55:13
Updated iceape packages fix many vulnerabilities
2013-11-21 00:16:49
suse
suse
Security update for Mozilla Firefox (important)
2013-11-15 03:04:14
Mozilla updates 10/2013 (important)
2013-11-07 11:04:15
Mozilla Suite: Update to October 2013 release (important)
2013-11-07 10:04:11
ubuntu
ubuntu
Thunderbird vulnerabilities
2013-10-31 00:00:00
Firefox vulnerabilities
2013-10-29 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-11-05 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-10-29 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00
osv
osv
MozillaThunderbird-45.5.1-1.1 on GA media
2024-06-15 00:00:00
MozillaFirefox-50.1.0-1.1 on GA media
2024-06-15 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
0.011
Percentile
84.8%
Related for MFSA2013-96