68 matches found
Thunderbird < 17.0.3 Multiple Vulnerabilities (Mac OS X)
The installed version of Thunderbird is earlier than 17.0.3 and thus, is potentially affected by the following security issues : - Numerous memory safety errors exist. CVE-2013-0783, CVE-2013-0784 - An out-of-bounds read error exists related to the handling of GIF images. CVE-2013-0772 - An error...
Firefox 18.x Multiple Vulnerabilities (Mac OS X)
The installed version of Firefox 18.x is potentially affected by the following security issues : - Numerous memory safety errors exist. CVE-2013-0783, CVE-2013-0784 - An out-of-bounds read error exists related to the handling of GIF images. CVE-2013-0772 - An error exists related to 'WebIDL' obje...
FreeBSD : mozilla -- multiple vulnerabilities (e3f0374a-7ad6-11e2-84cd-d43d7e0c7c02)
The Mozilla Project reports : MFSA 2013-21 Miscellaneous memory safety hazards rv:19.0 / rv:17.0.3 MFSA 2013-22 Out-of-bounds read in image rendering MFSA 2013-23 Wrapped WebIDL objects can be wrapped again MFSA 2013-24 Web content bypass of COW and SOW security wrappers MFSA 2013-25 Privacy leak...
CVE-2013-0765
Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 do not prevent multiple wrapping of WebIDL objects, which allows remote attackers to bypass intended access restrictions via unspecified vectors...
Design/Logic Flaw
Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 do not prevent multiple wrapping of WebIDL objects, which allows remote attackers to bypass intended access restrictions via unspecified vectors...
CVE-2013-0765
CVE-2013-0765 affects Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16. Root cause: a WebIDL object can be wrapped again, bypassing intended access restrictions. Impact is described as a bypass of access controls via unspecified vectors. Remediation from connected...
CVE-2013-0765
Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 do not prevent multiple wrapping of WebIDL objects, which allows remote attackers to bypass intended access restrictions via unspecified vectors...
Wrapped WebIDL objects can be wrapped again — Mozilla
Mozilla developer Boris Zbarsky reported that in some circumstances a wrapped WebIDL object can be wrapped multiple times, overwriting the existing wrapped state. This could lead to an exploitable condition in rare cases...