Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable8046.PRM
HistoryOct 31, 2013 - 12:00 a.m.

Mozilla Thunderbird < 24.1 Multiple Vulnerabilities

2013-10-3100:00:00
Tenable
www.tenable.com
6
JSON

Versions of Mozilla Thunderbird prior to version 24.1 are prone to the following vulnerabilities :

  • Miscellaneous use-after-free issues in the browsing engine (CVE-2013-5599, CVE-2013-5600, CVE-2013-5601)
  • Memory corruption in the Javascript engine when using workers with direct proxy (CVE-2013-5602)
  • Use-after-free issues when interacting with HTML templates (CVE-2013-5603)
  • Security bypass via iframe injection using PDF.js (CVE-2013-5598)
  • Miscellaneous memory safety issues in the browser engine (CVE-2013-5590, CVE-2013-5591, CVE-2013-5592, CVE-2013-1739)
  • Address spoofing in the addressbar via SELECT element, which can lead to clickjacking and other spoof attacks (CVE-2013-5593)
  • Access violation due to uninitialized data in XSLT processing (CVE-2013-5604)
  • Potential buffer/memory overflows in the Javascript engine (CVE-2013-5595)
  • Race condition causing a crash on extremely large pages (CVE-2013-5596)
  • A use-after-free issue during state change events when updating the offline cache (CVE-2013-5597)
Binary data 8046.prm
VendorProductVersionCPE
mozillathunderbirdcpe:/a:mozilla:thunderbird

References

Related

nessus 45
securityvulns 3
openvas 59
freebsd 1
suse 3
ubuntu 3
mageia 3
veracode 9
oraclelinux 4
redhat 2
debian 5
centos 3
ibm 2
mozilla 10
prion 15
ubuntucve 15
cve 15
debiancve 1
amazon 1
nessus
nessus
Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10 : firefox vulnerabilities (USN-2009-1)
2013-10-30 00:00:00
FreeBSD : mozilla -- multiple vulnerabilities (81f866ad-41a4-11e3-a4af-0025905a4771)
2013-10-31 00:00:00
SeaMonkey < 2.22 Multiple Vulnerabilities
2013-10-31 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-11-05 00:00:00
Mozilla nss uninitialized memory dereference
2013-10-28 00:00:00
[ MDVSA-2013:257 ] nss
2013-10-28 00:00:00
openvas
openvas
SuSE Update for Mozilla openSUSE-SU-2013:1634-1 (Mozilla)
2013-11-19 00:00:00
openSUSE: Security Advisory for Mozilla (openSUSE-SU-2013:1634-1)
2013-11-19 00:00:00
Ubuntu Update for firefox USN-2009-1
2013-11-08 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-10-29 00:00:00
suse
suse
Mozilla updates 10/2013 (important)
2013-11-07 11:04:15
Security update for Mozilla Firefox (important)
2013-11-15 03:04:14
Mozilla Suite: Update to October 2013 release (important)
2013-11-07 10:04:11
ubuntu
ubuntu
Firefox vulnerabilities
2013-10-29 00:00:00
Thunderbird vulnerabilities
2013-10-31 00:00:00
NSS vulnerabilities
2013-11-18 00:00:00
mageia
mageia
Updated firefox & related packages fix multiple security vulnerabilities
2013-11-09 22:55:13
Updated thunderbird package fixes security vulnerabilities
2013-11-18 18:39:59
Updated iceape packages fix many vulnerabilities
2013-11-21 00:16:49
veracode
veracode
Stack-based Buffer Overflow
2019-05-02 04:56:51
Use After Free
2019-05-02 04:56:51
Denial Of Service (DOS)
2019-05-02 04:56:49
oraclelinux
oraclelinux
thunderbird security update
2013-10-30 00:00:00
firefox security update
2013-10-29 00:00:00
nss and nspr security, bug fix, and enhancement update
2013-12-05 00:00:00
redhat
redhat
(RHSA-2013:1480) Important: thunderbird security update
2013-10-30 00:00:00
(RHSA-2013:1476) Critical: firefox security update
2013-10-29 00:00:00
debian
debian
[SECURITY] [DSA 2797-1] icedove security update
2013-11-13 21:45:22
[SECURITY] [DSA 2788-1] iceweasel security update
2013-10-31 08:27:05
[SECURITY] [DSA 2790-1] nss security update
2013-11-02 06:11:59
centos
centos
thunderbird security update
2013-10-30 22:19:56
firefox, xulrunner security update
2013-10-30 04:12:01
nspr, nss security update
2013-12-13 00:04:31
ibm
ibm
Security Bulletin: Mozilla firefox vulnerability issues on IBM Storwize V7000 Unified (CVE-2013-5590, CVE-2013-5595, CVE-2013-5597, CVE-2013-5599, CVE-2013-5600, CVE-2013-5601, CVE-2013-5602, CVE-2013-5604)
2018-06-18 00:07:38
Security Bulletin: Mozilla firefox vulnerability issues on SONAS (CVE-2013-5590, CVE-2013-5595, CVE-2013-5597, CVE-2013-5599, CVE-2013-5600, CVE-2013-5601, CVE-2013-5602, CVE-2013-5604)
2018-06-18 00:07:42
mozilla
mozilla
Miscellaneous memory safety hazards (rv:25.0 / rv:24.1 / rv:17.0.10) — Mozilla
2013-10-29 00:00:00
Miscellaneous use-after-free issues found through ASAN fuzzing — Mozilla
2013-10-29 00:00:00
Use-after-free in HTML document templates — Mozilla
2013-10-29 00:00:00
prion
prion
Memory corruption
2013-10-30 10:55:00
Design/Logic Flaw
2013-10-30 10:55:00
Hardcoded credentials
2013-10-30 10:55:00
ubuntucve
ubuntucve
CVE-2013-5592
2013-10-29 00:00:00
CVE-2013-5593
2013-10-29 00:00:00
CVE-2013-5603
2013-10-29 00:00:00
cve
cve
CVE-2013-5592
2013-10-30 10:55:00
CVE-2013-5603
2013-10-30 10:55:00
CVE-2013-5593
2013-10-30 10:55:00
debiancve
debiancve
CVE-2013-1739
2013-10-22 22:55:00
amazon
amazon
Important: nss
2013-12-17 21:31:00
JSON
Related for 8046.PRM
nessus45securityvulns3openvas59freebsd1suse3ubuntu3mageia3veracode9oraclelinux4redhat2debian5centos3ibm2mozilla10prion15ubuntucve15cve15debiancve1amazon1