The IonMonkey JavaScript engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21, when Valgrind mode is used, does not properly initialize memory, which makes it easier for remote attackers to obtain sensitive information via unspecified vectors.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Nov 2024, 01:50
Type | Values Removed | Values Added |
---|---|---|
References | () http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - | |
References | () http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - | |
References | () http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - | |
References | () http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - | |
References | () http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html - | |
References | () http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html - | |
References | () http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html - | |
References | () http://www.mozilla.org/security/announce/2013/mfsa2013-85.html - Vendor Advisory | |
References | () http://www.securityfocus.com/bid/62468 - | |
References | () http://www.ubuntu.com/usn/USN-1951-1 - | |
References | () http://www.ubuntu.com/usn/USN-1952-1 - | |
References | () https://bugzilla.mozilla.org/show_bug.cgi?id=883686 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18902 - |
Information
Published : 2013-09-18 10:08
Updated : 2024-11-21 01:50
NVD link : CVE-2013-1728
Mitre link : CVE-2013-1728
CVE.ORG link : CVE-2013-1728
JSON object : View
Products Affected
mozilla
- firefox
- thunderbird
- seamonkey
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer