インストールされている Firefox が 18.0 より前のバージョンであるため、次のセキュリティの問題により影響を受ける可能性があります：

  - Multiple, unspecified use-after-free, out-of-bounds read and buffer overflow errors exist. (CVE-2012-5829, CVE-2013-0760, CVE-2013-0761, CVE-2013-0762, CVE-2013-0763, CVE-2013-0766, CVE-2013-0767, CVE-2013-0771)

  - Two intermediate certificates were improperly issued by TURKTRUST certificate authority. (CVE-2013-0743)

  - 列や列のグループの数が大きい HTML テーブルの表示に関連して、 use-after-free エラーが存在します。
    (CVE-2013-0744)

  - An error exists related to the 'AutoWrapperChanger' class that does not properly manage objects during garbage collection. (CVE-2012-0745)

  - An error exists related to 'jsval', 'quickstubs', and compartmental mismatches that can lead potentially exploitable crashes. (CVE-2013-0746)

  - プラグインハンドラーのイベントに関連してエラーが存在します。これにより、同一生成元ポリシーがバイパスされる可能性があります。
    (CVE-2013-0747)

  - XBL オブジェクトの「toString」メソッドに関連してエラーが存在し、これにより、アドレス情報の漏洩が発生する可能性があります。
    (CVE-2013-0748)

  - 特定されないメモリ破損の問題が存在します。
    (CVE-2013-0749, CVE-2013-0769, CVE-2013-0770)

  - A buffer overflow exists related to JavaScript string concatenation. (CVE-2013-0750)

  - An error exists related to multiple XML bindings with SVG content, contained in XBL files. (CVE-2013-0752)

  - 「XMLSerializer」および「serializeToStream」に関連する use-after-free エラーが存在します。
    (CVE-2013-0753)

  - A use-after-free error exists related to garbage collection and 'ListenManager'. (CVE-2013-0754)

  - A use-after-free error exists related to the 'Vibrate' library and 'domDoc'. (CVE-2013-0755)

  - A use-after-free error exists related to JavaScript 'Proxy' objects. (CVE-2013-0756)   
  - 'Chrome Object Wrappers' (COW) can be bypassed by changing object prototypes and can allow arbitrary code execution. (CVE-2013-0757)

  - An error related to SVG elements and plugins can allow privilege escalation. (CVE-2013-0758)

  - An error exists related to the address bar that can allow URL spoofing attacks. (CVE-2013-0759)

  - SSL およびスレッドに関連するエラーが存在します。これにより、クラッシュが引き起こされ、悪用される可能性があります。
    (CVE-2013-0764)

  - An error exists related to 'Canvas' and bad height or width values passed to it from HTML. (CVE-2013-0768)

リモートホストは、GLSA-201309-23 で説明されている脆弱性の影響を受けます（Mozilla 製品：複数の脆弱性）

Mozilla Firefox、Thunderbird、および SeaMonkey で、複数の脆弱性が発見されています。詳細については、以下で参照されている CVE 識別子をレビューしてください。
 影響：

リモートの攻撃者が、ユーザーを誘導し、特別に細工された Web ページやメールを表示させることができた場合、任意のコードを実行したり、サービス拒否状態を発生させたりする可能性があります。さらに、リモートの攻撃者は、XSS 攻撃を仕掛ける、URL を偽装する、アドレス空間配置のランダム化をバイパスする、クリックジャッキング攻撃を仕掛ける、潜在的な機密情報を入手する、アクセス制限をバイパスする、ローカルなファイルシステムを改ざんする、またはその他の詳細不明な攻撃を仕掛ける可能性があります。
 回避策：

現時点で、既知の回避策はありません。

Versions of Firefox prior to 18.0 are potentially affected by the following security issues :

 - Multiple, unspecified use-after-free, out-of-bounds read and buffer overflow errors exist. (CVE-2012-5829, CVE-2013-0760, CVE-2013-0761, CVE-2013-0762, CVE-2013-0763, CVE-2013-0766, CVE-2013-0767, CVE-2013-0771)
 - Two intermediate certificates were improperly issued by TURKTRUST certificate authority. (CVE-2013-0743)
 - A use-after-free error exists related to displaying HTML tables with many columns and column groups. (CVE-2013-0744)
 - An error exists related to the 'AutoWrapperChanger' class that does not properly manage objects during garbage collection. (CVE-2012-0745)
 - An error exists related to 'jsval', 'quickstubs', and compartmental mismatches that can lead potentially exploitable crashes. (CVE-2013-0746)
 - Errors exist related to events in the plugin handler that can allow same-origin policy bypass. (CVE-2013-0747)
 - An error related to the 'toString' method of XBL objects can lead to address information leakage. (CVE-2013-0748)
 - An unspecified memory corruption issue exists. (CVE-2013-0749, CVE-2013-0769, CVE-2013-0770)
 - A buffer overflow exists related to JavaScript string concatenation. (CVE-2013-0750)
 - An error exists related to multiple XML bindings with SVG content, contained in XBL files. (CVE-2013-0752)
 - A use-after-free error exists related to 'XMLSerializer' and 'serializeToStream'. (CVE-2013-0753)
 - A use-after-free error exists related to garbage collection and 'ListenManager'. (CVE-2013-0754)
 - A use-after-free error exists related to the 'Vibrate' library and 'domDoc'. (CVE-2013-0755)
 - A use-after-free error exists related to JavaScript 'Proxy' objects. (CVE-2013-0756)
 - 'Chrome Object Wrappers' (COW) can be bypassed by changing object prototypes and can allow arbitrary code execution. (CVE-2013-0757)
 - An error related to SVG elements and plugins can allow privilege escalation. (CVE-2013-0758)
 - An error exists related to the address bar that can allow URL spoofing attacks. (CVE-2013-0759)
 - An error exists related to SSL and threading that can result in potentially exploitable crashes. (CVE-2013-0764)
 - An error exists related to 'Canvas' and bad height or width values passed to it from HTML. (CVE-2013-0768)

Versions of SeaMonkey 2.14.x are potentially affected by the following security issues :

  - Multiple, unspecified use-after-free, out-of-bounds read and buffer overflow errors exist. (CVE-2012-5829, CVE-2013-0760, CVE-2013-0761, CVE-2013-0762, CVE-2013-0763, CVE-2013-0766, CVE-2013-0767, CVE-2013-0771)

  - Two intermediate certificates were improperly issued by TURKTRUST certificate authority. (CVE-2013-0743)

  - A use-after-free error exists related to displaying HTML tables with many columns and column groups. (CVE-2013-0744)

  - An error exists related to the 'AutoWrapperChanger' class that does not properly manage objects during garbage collection. (CVE-2012-0745)

  - An error exists related to 'jsval', 'quickstubs', and compartmental mismatches that can lead potentially exploitable crashes. (CVE-2013-0746)

  - Errors exist related to events in the plugin handler that can allow same-origin policy bypass. (CVE-2013-0747)

  - An error related to the 'toString' method of XBL objects can lead to address information leakage. (CVE-2013-0748)

  - An unspecified memory corruption issue exists. (CVE-2013-0749, CVE-2013-0769, CVE-2013-0770)

  - A buffer overflow exists related to JavaScript string concatenation. (CVE-2013-0750)

  - An error exists related to multiple XML bindings with SVG content, contained in XBL files. (CVE-2013-0752)

  - A use-after-free error exists related to 'XMLSerializer' and 'serializeToStream'. (CVE-2013-0753)

  - A use-after-free error exists related to garbage collection and 'ListenManager'. (CVE-2013-0754)

  - A use-after-free error exists related to the 'Vibrate' library and 'domDoc'. (CVE-2013-0755)

  - A use-after-free error exists related to JavaScript 'Proxy' objects. (CVE-2013-0756)

  - 'Chrome Object Wrappers' (COW) can be bypassed by changing object prototypes and can allow arbitrary code execution. (CVE-2013-0757)

  - An error related to SVG elements and plugins can allow privilege escalation. (CVE-2013-0758)

  - An error exists related to the address bar that can allow URL spoofing attacks. (CVE-2013-0759)

  - An error exists related to SSL and threading that can result in potentially exploitable crashes. (CVE-2013-0764)

  - An error exists related to 'Canvas' and bad height or width values passed to it from HTML. (CVE-2013-0768)

Versions of Firefox 17.x are potentially affected by the following security issues :

  - Multiple, unspecified use-after-free, out-of-bounds read and buffer overflow errors exist. (CVE-2012-5829, CVE-2013-0760, CVE-2013-0761, CVE-2013-0762, CVE-2013-0763, CVE-2013-0766, CVE-2013-0767, CVE-2013-0771)

  - Two intermediate certificates were improperly issued by TURKTRUST certificate authority. (CVE-2013-0743)

  - A use-after-free error exists related to displaying HTML tables with many columns and column groups. (CVE-2013-0744)

  - An error exists related to the 'AutoWrapperChanger' class that does not properly manage objects during garbage collection. (CVE-2012-0745)

  - An error exists related to 'jsval', 'quickstubs', and compartmental mismatches that can lead potentially exploitable crashes. (CVE-2013-0746)

  - Errors exist related to events in the plugin handler that can allow same-origin policy bypass. (CVE-2013-0747)

  - An error related to the 'toString' method of XBL objects can lead to address information leakage. (CVE-2013-0748)

  - An unspecified memory corruption issue exists. (CVE-2013-0749, CVE-2013-0769, CVE-2013-0770)

  - A buffer overflow exists related to JavaScript string concatenation. (CVE-2013-0750)

  - An error exists related to multiple XML bindings with SVG content, contained in XBL files. (CVE-2013-0752)

  - A use-after-free error exists related to 'XMLSerializer' and 'serializeToStream'. (CVE-2013-0753)

  - A use-after-free error exists related to garbage collection and 'ListenManager'. (CVE-2013-0754)

  - A use-after-free error exists related to the 'Vibrate' library and 'domDoc'. (CVE-2013-0755)

  - A use-after-free error exists related to JavaScript 'Proxy' objects. (CVE-2013-0756)

  - 'Chrome Object Wrappers' (COW) can be bypassed by changing object prototypes and can allow arbitrary code execution. (CVE-2013-0757)

  - An error related to SVG elements and plugins can allow privilege escalation. (CVE-2013-0758)

  - An error exists related to the address bar that can allow URL spoofing attacks. (CVE-2013-0759)

  - An error exists related to SSL and threading that can result in potentially exploitable crashes. (CVE-2013-0764)

  - An error exists related to 'Canvas' and bad height or width values passed to it from HTML. (CVE-2013-0768)

ID	名稱	產品	系列	已發布	已更新	嚴重性
63551	Firefox < 18.0複数の脆弱性	Nessus	Windows	2013/1/15	2019/12/4	critical
70183	GLSA-201309-23：Mozilla 製品：複数の脆弱性	Nessus	Gentoo Local Security Checks	2013/9/28	2022/3/29	critical
6668	Mozilla Firefox < 18.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2013/1/15	2019/3/6	high
6670	SeaMonkey 2.14.x < 2.15 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2013/1/15	2019/3/6	high
801376	Mozilla SeaMonkey 2.x <= 2.14 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2013/1/15		high
800108	Mozilla Firefox 17.x <= 17 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2013/1/15		high
801345	Mozilla Firefox 17.x <= 17 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2013/1/15		high

偵測

搜尋 Plugin

critical

critical

high

high

high

high

high