Lucene search
Mozilla FoundationMFSA2013-85HistorySep 17, 2013 - 12:00 a.m.
Uninitialized data in IonMonkey — Mozilla
2013-09-1700:00:00
Mozilla Foundation
www.mozilla.org
15
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
76.8%
Software developer Dan Gohman of Google reported uninitialized data and variables in the IonMonkey Javascript engine when running the engine in Valgrind mode. This could be combined with additional exploits to allow the reading and use of previously allocated memory in some circumstances.
Affected configurations
Node
mozillafirefoxRange<24
ORmozillaseamonkeyRange<2.21
ORmozillathunderbirdRange<24
Related
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-85) - Linux
2021-11-11 00:00:00
Ubuntu: Security Advisory (USN-1952-1)
2013-09-24 00:00:00
Ubuntu Update for thunderbird USN-1952-1
2013-09-24 00:00:00
nvd
nvd
CVE-2013-1728
2013-09-18 10:08:24
cvelist
cvelist
CVE-2013-1728
2013-09-18 10:00:00
cve
cve
CVE-2013-1728
2013-09-18 10:08:24
ubuntucve
ubuntucve
CVE-2013-1728
2013-09-17 00:00:00
prion
prion
Design/Logic Flaw
2013-09-18 10:08:00
nessus
nessus
Ubuntu 12.04 LTS / 12.10 / 13.04 : thunderbird vulnerabilities (USN-1952-1)
2013-09-19 00:00:00
openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2013:1495-1)
2014-06-13 00:00:00
openSUSE Security Update : seamonkey (openSUSE-SU-2013:1491-1)
2014-06-13 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2013-09-18 00:00:00
Firefox vulnerabilities
2013-09-17 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-10-01 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-08-17 00:00:00
mageia
mageia
Updated iceape packages fix many vulnerabilities
2013-11-21 00:16:49
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-09-27 00:00:00
suse
suse
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
76.8%
Related for MFSA2013-85