PRIOn knowledge basePRION:CVE-2013-5615Design/Logic Flaw
The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not properly enforce certain typeset restrictions on the generation of GetElementIC typed array stubs, which has unspecified impact and remote attack vectors.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 13.04 | |
| ubuntu_linux | eq | 13.10 | |
| ubuntu_linux | eq | 12.10 | |
| ubuntu_linux | eq | 12.04 | |
| fedora | eq | 18 | |
| fedora | eq | 20 | |
| fedora | eq | 19 | |
| firefox | lt | 26.0 | |
| firefox_esr | ge | 24.0 | |
| firefox_esr | lt | 24.2 |
References
lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html
lists.opensuse.org/opensuse-updates/2013-12/msg00085.html
lists.opensuse.org/opensuse-updates/2013-12/msg00086.html
lists.opensuse.org/opensuse-updates/2013-12/msg00087.html
lists.opensuse.org/opensuse-updates/2013-12/msg00119.html
lists.opensuse.org/opensuse-updates/2013-12/msg00120.html
lists.opensuse.org/opensuse-updates/2013-12/msg00121.html
lists.opensuse.org/opensuse-updates/2014-01/msg00002.html
www.mozilla.org/security/announce/2013/mfsa2013-115.html
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
www.securitytracker.com/id/1029470
www.securitytracker.com/id/1029476
www.ubuntu.com/usn/USN-2052-1
www.ubuntu.com/usn/USN-2053-1
bugzilla.mozilla.org/show_bug.cgi?id=929261
lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html
lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html
lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html
lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html
security.gentoo.org/glsa/201504-01
Related
