Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

openSUSE: Security Advisory for Mozilla (openSUSE-SU-2013:1634-1)

🗓️ 19 Nov 2013 00:00:00Reported by Copyright (C) 2013 Greenbone AGType 
openvas
 openvas🔗 plugins.openvas.org👁 28 Views

Security Advisory for Mozilla version 24.1.0 on openSUSE 11.4 addressing multiple vulnerabilities

Code
# SPDX-FileCopyrightText: 2013 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.850537");
  script_version("2026-04-24T06:23:04+0000");
  script_tag(name:"last_modification", value:"2026-04-24 06:23:04 +0000 (Fri, 24 Apr 2026)");
  script_tag(name:"creation_date", value:"2013-11-19 14:05:33 +0530 (Tue, 19 Nov 2013)");
  script_cve_id("CVE-2013-5590", "CVE-2013-5591", "CVE-2013-5592", "CVE-2013-5593",
                "CVE-2013-5595", "CVE-2013-5596", "CVE-2013-5597", "CVE-2013-5599",
                "CVE-2013-5600", "CVE-2013-5601", "CVE-2013-5602", "CVE-2013-5603",
                "CVE-2013-5604", "CVE-2013-5598");
  script_tag(name:"cvss_base", value:"10.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_name("openSUSE: Security Advisory for Mozilla (openSUSE-SU-2013:1634-1)");

  script_tag(name:"affected", value:"Mozilla on openSUSE 11.4");

  script_tag(name:"insight", value:"Update NSPR to 4.10.1 Update Thunderbird to 24.1.0 (incl.
  enigmail 1.6) Update Firefox to 24.1.0esr

  Changes in MozillaFirefox:

  * requires NSS 3.15.2 or above

  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
  Miscellaneous memory safety hazards

  * MFSA 2013-94/CVE-2013-5593 (bmo#868327) Spoofing
  addressbar through SELECT element

  * MFSA 2013-95/CVE-2013-5604 (bmo#914017) Access
  violation with XSLT and uninitialized data

  * MFSA 2013-96/CVE-2013-5595 (bmo#916580) Improperly
  initialized memory and overflows in some JavaScript
  functions

  * MFSA 2013-97/CVE-2013-5596 (bmo#910881) Writing to
  cycle collected object during image decoding

  * MFSA 2013-98/CVE-2013-5597 (bmo#918864) Use-after-free
  when updating offline cache

  * MFSA 2013-99/CVE-2013-5598 (bmo#920515) Security bypass
  of PDF.js checks using iframes

  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
  (bmo#915210, bmo#915576, bmo#916685) Miscellaneous
  use-after-free issues found through ASAN fuzzing

  * MFSA 2013-101/CVE-2013-5602 (bmo#897678) Memory
  corruption in workers

  * MFSA 2013-102/CVE-2013-5603 (bmo#916404) Use-after-free
  in HTML document templates

  Changes in MozillaThunderbird:

  * requires NSS 3.15.2 or above

  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
  Miscellaneous memory safety hazards

  * MFSA 2013-94/CVE-2013-5593 (bmo#868327) Spoofing
  addressbar through SELECT element

  * MFSA 2013-95/CVE-2013-5604 (bmo#914017) Access
  violation with XSLT and uninitialized data

  * MFSA 2013-96/CVE-2013-5595 (bmo#916580) Improperly
  initialized memory and overflows in some JavaScript
  functions

  * MFSA 2013-97/CVE-2013-5596 (bmo#910881) Writing to
  cycle collected object during image decoding

  * MFSA 2013-98/CVE-2013-5597 (bmo#918864) Use-after-free
  when updating offline cache

  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
  (bmo#915210, bmo#915576, bmo#916685) Miscellaneous
  use-after-free issues found through ASAN fuzzing

  * MFSA 2013-101/CVE-2013-5602 (bmo#897678) Memory
  corruption in workers

  * MFSA 2013-102/CVE-2013-5603 (bmo#916404) Use-after-free
  in HTML document templates

  - update to Thunderbird 24.0.1

  * fqdn for smtp server name was not accepted (bmo#913785)

  * fixed crash in PL_strncasecmp (bmo#917955)

  - update Enigmail to 1.6

  * The passphrase timeout configuration in Enigmail is now
  read and written from/to gpg-agent.

  * New dialog to change the expiry date of keys

  * New function to search for the OpenPGP keys of all
  Address Book entries on a keyserver

  * removed obsolete enigmail-build.patch

  Changes in  ...

  Description truncated, please see the referenced URL(s) for more information.");

  script_tag(name:"solution", value:"Please install the updated package(s).");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");

  script_tag(name:"qod_type", value:"package");
  script_tag(name:"solution_type", value:"VendorFix");
  script_xref(name:"openSUSE-SU", value:"2013:1634-1");
  script_tag(name:"summary", value:"The remote host is missing an update for the 'Mozilla'
  package(s) announced via the referenced advisory.");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2013 Greenbone AG");
  script_family("SuSE Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/suse", "ssh/login/rpms", re:"ssh/login/release=openSUSE11\.4");

  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-rpm.inc");

release = rpm_get_ssh_release();
if(!release)
  exit(0);

res = "";
report = "";

if(release == "openSUSE11.4") {
  if(!isnull(res = isrpmvuln(pkg:"MozillaFirefox", rpm:"MozillaFirefox~24.1.0~91.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"MozillaFirefox-branding-upstream", rpm:"MozillaFirefox-branding-upstream~24.1.0~91.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"MozillaFirefox-buildsymbols", rpm:"MozillaFirefox-buildsymbols~24.1.0~91.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"MozillaFirefox-debuginfo", rpm:"MozillaFirefox-debuginfo~24.1.0~91.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"MozillaFirefox-debugsource", rpm:"MozillaFirefox-debugsource~24.1.0~91.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"MozillaFirefox-devel", rpm:"MozillaFirefox-devel~24.1.0~91.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"MozillaFirefox-translations-common", rpm:"MozillaFirefox-translations-common~24.1.0~91.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"MozillaFirefox-translations-other", rpm:"MozillaFirefox-translations-other~24.1.0~91.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"MozillaThunderbird", rpm:"MozillaThunderbird~24.1.0~77.2", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"MozillaThunderbird-buildsymbols", rpm:"MozillaThunderbird-buildsymbols~24.1.0~77.2", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"MozillaThunderbird-debuginfo", rpm:"MozillaThunderbird-debuginfo~24.1.0~77.2", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"MozillaThunderbird-debugsource", rpm:"MozillaThunderbird-debugsource~24.1.0~77.2", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"MozillaThunderbird-devel", rpm:"MozillaThunderbird-devel~24.1.0~77.2", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"MozillaThunderbird-translations-common", rpm:"MozillaThunderbird-translations-common~24.1.0~77.2", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"MozillaThunderbird-translations-other", rpm:"MozillaThunderbird-translations-other~24.1.0~77.2", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"enigmail", rpm:"enigmail~1.6.0+24.1.0~77.2", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"mozilla-nspr", rpm:"mozilla-nspr~4.10.1~32.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"mozilla-nspr-debuginfo", rpm:"mozilla-nspr-debuginfo~4.10.1~32.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"mozilla-nspr-debugsource", rpm:"mozilla-nspr-debugsource~4.10.1~32.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"mozilla-nspr-devel", rpm:"mozilla-nspr-devel~4.10.1~32.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"seamonkey", rpm:"seamonkey~2.22~81.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"seamonkey-debuginfo", rpm:"seamonkey-debuginfo~2.22~81.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"seamonkey-debugsource", rpm:"seamonkey-debugsource~2.22~81.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"seamonkey-dom-inspector", rpm:"seamonkey-dom-inspector~2.22~81.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"seamonkey-irc", rpm:"seamonkey-irc~2.22~81.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"seamonkey-translations-common", rpm:"seamonkey-translations-common~2.22~81.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"seamonkey-translations-other", rpm:"seamonkey-translations-other~2.22~81.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"seamonkey-venkman", rpm:"seamonkey-venkman~2.22~81.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"mozilla-nspr-32bit", rpm:"mozilla-nspr-32bit~4.10.1~32.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"mozilla-nspr-debuginfo-32bit", rpm:"mozilla-nspr-debuginfo-32bit~4.10.1~32.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"mozilla-nspr-debuginfo-x86", rpm:"mozilla-nspr-debuginfo-x86~4.10.1~32.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"mozilla-nspr-x86", rpm:"mozilla-nspr-x86~4.10.1~32.1", rls:"openSUSE11.4"))) {
    report += res;
  }

  if(report != "") {
    security_message(data:report);
  } else if(__pkg_match) {
    exit(99);
  }
  exit(0);
}

exit(0);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
24 Apr 2026 00:00Current
6.5Medium risk
Vulners AI Score6.5
mozillaopensuseopensuse-su-2013:1634-1security advisorycve-2013-5590cve-2013-5591cve-2013-5592cve-2013-5593cve-2013-5595cve-2013-5596cve-2013-5597cve-2013-5598cve-2013-5600cve-2013-5601cve-2013-5602cve-2013-5603cve-2013-5604nsprthunderbirdfirefox
28