CVE-2013-5619: Integer Overflow or Wraparound

Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JavaScript code...

CVE-2013-6673: Undefined Security Weakness

Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle attackers to spoof SSL servers in opportunistic circumstances via a...

CVE-2013-6671: Improper Control of Generation of Code

The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code via crafted use of JavaScript code for ordered list elements...

CVE-2013-5614: Improper Restriction of Rendered UI Layers or Frames

Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site...

CVE-2013-5609: Undefined Security Weakness

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary cod...

PT-2013-6069

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 26.0 SeaMonkey versions prior to 2.23 Description The issue allows user-assisted remote attackers to read clipboard data by leveraging certain middle-click paste operations on Linux systems. Recommendations Fo...

[SECURITY] Fedora 19 Update: seamonkey-2.22.1-1.fc19

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

[SECURITY] Fedora 18 Update: seamonkey-2.22.1-1.fc18

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

PT-2013-5685

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 26.0 Firefox ESR 24.x versions prior to 24.2 Thunderbird versions prior to 24.2 SeaMonkey versions prior to 2.23 Description The issue is related to a use-after-free vulnerability in the...

PT-2013-5679

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 26.0 SeaMonkey versions prior to 2.23 Description The issue is related to multiple unspecified vulnerabilities in the browser engine, which can be exploited by remote attackers to cause a denial of service,...

PT-2013-5686

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 26.0 Firefox ESR 24.x versions prior to 24.2 Thunderbird versions prior to 24.2 SeaMonkey versions prior to 2.23 Description A use-after-free issue in the nsNodeUtils::LastRelease function in the table-editing...

PT-2013-6070

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 26.0 Firefox ESR versions 24.x prior to 24.2 Thunderbird versions prior to 24.2 SeaMonkey versions prior to 2.23 Description The issue makes it easier for man-in-the-middle attackers to spoof SSL servers via a...

PT-2013-6068

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 26.0 Firefox ESR 24.x versions prior to 24.2 Thunderbird versions prior to 24.2 SeaMonkey versions prior to 2.23 Description The issue allows remote attackers to execute arbitrary code via crafted use of...

Fedora 19 : seamonkey-2.22.1-1.fc19 (2013-22467)

Update to 2.22.1 Fixes various security issues, see http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html for more info. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatical...

PT-2013-5684

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 26.0 Firefox ESR 24.x versions prior to 24.2 Thunderbird versions prior to 24.2 SeaMonkey versions prior to 2.23 Description The JavaScript implementation does not properly enforce certain typeset restrictions...

PT-2013-5687

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 26.0 SeaMonkey versions prior to 2.23 Description The issue is related to multiple integer overflows in the binary-search implementation in SpiderMonkey, which might allow remote attackers to cause a denial of...

Fedora 18 : seamonkey-2.22.1-1.fc18 (2013-22456)

Update to 2.22.1 Fixes various security issues, see http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html for more info. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatical...

PT-2013-5681

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 26.0 SeaMonkey versions prior to 2.23 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is due to a Same Origin Policy violation...

PT-2013-5683

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 26.0 SeaMonkey versions prior to 2.23 Description The issue allows remote attackers to bypass intended sandbox restrictions via a crafted web site, due to improper consideration of the sandbox attribute of an...

PT-2013-5678

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 26.0 Firefox ESR 24.x versions prior to 24.2 Thunderbird versions prior to 24.2 SeaMonkey versions prior to 2.23 Description The issue is related to multiple unspecified vulnerabilities in the browser engine,...