Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable701256.PRM
HistoryNov 06, 2019 - 12:00 a.m.

Mozilla Firefox ESR < 24.1 Multiple Vulnerabilities

2019-11-0600:00:00
Tenable
www.tenable.com
19

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.111 Low

EPSS

Percentile

95.2%

JSON

Versions of Mozilla Firefox ESR versions earlier than 24.1 are affected by the following vulnerabilities :

  • Miscellaneous use-after-free issues in the browsing engine (CVE-2013-5599, CVE-2013-5600, CVE-2013-5601)
  • Memory corruption in the Javascript engine when using workers with direct proxy (CVE-2013-5602)
  • Use-after-free issues when interacting with HTML templates (CVE-2013-5603)
  • Security bypass via iframe injection using PDF.js (CVE-2013-5598)
  • Miscellaneous memory safety issues in the browser engine (CVE-2013-5590, CVE-2013-5591, CVE-2013-5592, CVE-2013-1739)
  • Address spoofing in the addressbar via SELECT element, which can lead to clickjacking and other spoof attacks (CVE-2013-5593)
  • Access violation due to uninitialized data in XSLT processing (CVE-2013-5604)
  • Potential buffer/memory overflows in the Javascript engine (CVE-2013-5595)
  • Race condition causing a crash on extremely large pages (CVE-2013-5596)
  • A use-after-free issue during state change events when updating the offline cache (CVE-2013-5597)
Binary data 701256.prm
VendorProductVersionCPE
mozillafirefox_esrcpe:/a:mozilla:firefox_esr

References

Related

nessus 39
freebsd 1
securityvulns 3
openvas 52
suse 3
ubuntu 2
mageia 2
centos 2
redhat 2
debian 3
veracode 8
oraclelinux 2
ibm 2
mozilla 9
prion 14
ubuntucve 15
nvd 13
cve 14
cvelist 13
nessus
nessus
Mozilla Firefox < 25.0 Multiple Vulnerabilities
2013-10-31 00:00:00
Mozilla Firefox ESR < 17.0.10 Multiple Vulnerabilities
2019-11-06 00:00:00
Firefox < 25.0 Multiple Vulnerabilities
2013-10-31 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-10-29 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-11-05 00:00:00
Mozilla nss uninitialized memory dereference
2013-10-28 00:00:00
[ MDVSA-2013:257 ] nss
2013-10-28 00:00:00
openvas
openvas
SuSE Update for Mozilla openSUSE-SU-2013:1634-1 (Mozilla)
2013-11-19 00:00:00
Ubuntu: Security Advisory (USN-2010-1)
2013-11-08 00:00:00
openSUSE: Security Advisory for Mozilla (openSUSE-SU-2013:1634-1)
2013-11-19 00:00:00
suse
suse
Mozilla updates 10/2013 (important)
2013-11-07 11:04:15
Security update for Mozilla Firefox (important)
2013-11-15 03:04:14
Mozilla Suite: Update to October 2013 release (important)
2013-11-07 10:04:11
ubuntu
ubuntu
Thunderbird vulnerabilities
2013-10-31 00:00:00
Firefox vulnerabilities
2013-10-29 00:00:00
mageia
mageia
Updated firefox & related packages fix multiple security vulnerabilities
2013-11-09 22:55:13
Updated thunderbird package fixes security vulnerabilities
2013-11-18 18:39:59
centos
centos
firefox, xulrunner security update
2013-10-30 04:12:01
thunderbird security update
2013-10-30 22:19:56
redhat
redhat
(RHSA-2013:1480) Important: thunderbird security update
2013-10-30 00:00:00
(RHSA-2013:1476) Critical: firefox security update
2013-10-29 00:00:00
debian
debian
[SECURITY] [DSA 2797-1] icedove security update
2013-11-13 21:44:43
[SECURITY] [DSA 2788-1] iceweasel security update
2013-10-31 08:03:44
[SECURITY] [DSA 2790-1] nss security update
2013-11-02 06:11:39
veracode
veracode
Use After Free
2019-05-02 04:56:51
Stack-based Buffer Overflow
2019-05-02 04:56:51
Memory Corruption
2019-05-02 04:56:51
oraclelinux
oraclelinux
thunderbird security update
2013-10-30 00:00:00
firefox security update
2013-10-29 00:00:00
ibm
ibm
Security Bulletin: Mozilla firefox vulnerability issues on IBM Storwize V7000 Unified (CVE-2013-5590, CVE-2013-5595, CVE-2013-5597, CVE-2013-5599, CVE-2013-5600, CVE-2013-5601, CVE-2013-5602, CVE-2013-5604)
2018-06-18 00:07:38
Security Bulletin: Mozilla firefox vulnerability issues on SONAS (CVE-2013-5590, CVE-2013-5595, CVE-2013-5597, CVE-2013-5599, CVE-2013-5600, CVE-2013-5601, CVE-2013-5602, CVE-2013-5604)
2018-06-18 00:07:42
mozilla
mozilla
Miscellaneous memory safety hazards (rv:25.0 / rv:24.1 / rv:17.0.10) — Mozilla
2013-10-29 00:00:00
Miscellaneous use-after-free issues found through ASAN fuzzing — Mozilla
2013-10-29 00:00:00
Use-after-free in HTML document templates — Mozilla
2013-10-29 00:00:00
prion
prion
Memory corruption
2013-10-30 10:55:00
Hardcoded credentials
2013-10-30 10:55:00
Design/Logic Flaw
2013-10-30 10:55:00
ubuntucve
ubuntucve
CVE-2013-5592
2013-10-29 00:00:00
CVE-2013-5593
2013-10-29 00:00:00
CVE-2013-5603
2013-10-29 00:00:00
nvd
nvd
CVE-2013-5592
2013-10-30 10:55:04
CVE-2013-5593
2013-10-30 10:55:04
CVE-2013-5596
2013-10-30 10:55:04
cve
cve
CVE-2013-5603
2013-10-30 10:55:04
CVE-2013-5592
2013-10-30 10:55:04
CVE-2013-5593
2013-10-30 10:55:04
cvelist
cvelist
CVE-2013-5592
2013-10-30 10:00:00
CVE-2013-5593
2013-10-30 10:00:00
CVE-2013-5596
2013-10-30 10:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.111 Low

EPSS

Percentile

95.2%

JSON
Related for 701256.PRM
nessus39freebsd1securityvulns3openvas52suse3ubuntu2mageia2centos2redhat2debian3veracode8oraclelinux2ibm2mozilla9prion14ubuntucve15nvd13cve14cvelist13