CVE-2013-5609
Mozilla: Miscellaneous memory safety hazards (rv:24.2) (MFSA 2013-104)
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Red Hat. Daha düşük diyenler: Oracle (yüksek), Ubuntu (orta).
Açıklama
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 7 | iceape | düzeltme belirtilmemiş |
| Oracle Linux 5 | firefox, thunderbird | 24.2.0-1.0.1.el5_10 ve 1 tane daha |
| Oracle Linux 6 | firefox, thunderbird | 24.2.0-1.0.1.el6_5 |
| ubuntu 12.04 | firefox, thunderbird | 26.0+build2-0ubuntu0.12.04.2 ve 1 tane daha |
| ubuntu 12.10 | firefox, thunderbird | 26.0+build2-0ubuntu0.12.10.2 ve 1 tane daha |
| ubuntu 13.04 | firefox, thunderbird | 26.0+build2-0ubuntu0.13.04.2 ve 1 tane daha |
| ubuntu 13.10 | firefox, thunderbird | 26.0+build2-0ubuntu0.13.10.2 ve 1 tane daha |
7 kaynaktaki 13 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 7 | iceape | düzeltme belirtilmemiş |
| Oracle Linux 5 | firefox | 24.2.0-1.0.1.el5_10 |
| Oracle Linux 5 | thunderbird | 24.2.0-2.0.1.el5_10 |
| Oracle Linux 6 | firefox | 24.2.0-1.0.1.el6_5 |
| Oracle Linux 6 | thunderbird | 24.2.0-1.0.1.el6_5 |
| ubuntu 12.04 | firefox | 26.0+build2-0ubuntu0.12.04.2 |
| ubuntu 12.04 | thunderbird | 1:24.2.0+build1-0ubuntu0.12.04.1 |
| ubuntu 12.10 | firefox | 26.0+build2-0ubuntu0.12.10.2 |
| ubuntu 12.10 | thunderbird | 1:24.2.0+build1-0ubuntu0.12.10.1 |
| ubuntu 13.04 | firefox | 26.0+build2-0ubuntu0.13.04.2 |
| ubuntu 13.04 | thunderbird | 1:24.2.0+build1-0ubuntu0.13.04.1 |
| ubuntu 13.10 | firefox | 26.0+build2-0ubuntu0.13.10.2 |
| ubuntu 13.10 | thunderbird | 1:24.2.0+build1-0ubuntu0.13.10.1 |
Referanslar
- http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html
- http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html
31 referansın hepsi
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html
- http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html
- http://rhn.redhat.com/errata/RHSA-2013-1812.html
- http://www.mozilla.org/security/announce/2013/mfsa2013-104.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1029470
- http://www.securitytracker.com/id/1029476
- http://www.ubuntu.com/usn/USN-2052-1
- http://www.ubuntu.com/usn/USN-2053-1
- https://access.redhat.com/security/cve/CVE-2013-5609
- https://bugzilla.mozilla.org/show_bug.cgi?id=886850
- https://bugzilla.mozilla.org/show_bug.cgi?id=905382
- https://bugzilla.mozilla.org/show_bug.cgi?id=922009
- https://bugzilla.mozilla.org/show_bug.cgi?id=937582
- https://linux.oracle.com/cve/CVE-2013-5609.html
- https://linux.oracle.com/errata/ELSA-2013-1823.html
- https://nvd.nist.gov/vuln/detail/CVE-2013-5609
- https://security.gentoo.org/glsa/201504-01
- https://ubuntu.com/security/notices/USN-2052-1
- https://ubuntu.com/security/notices/USN-2053-1
- https://www.cve.org/CVERecord?id=CVE-2013-5609