Olli Pettay, Christoph Diehl, Gary Kwong, Jesse Ruderman, Andrew McCreight, Joe Drew, Wayne Mery, Alon Zakai, Christian Holler, Gary Kwong, Luke Wagner, Terrence Cole, Timothy Nikkel, Bill McCloskey, and Nicolas Pierron discovered multiple memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash. (CVE-2013-0783, CVE-2013-0784)

Atte Kettunen discovered that Firefox could perform an out-of-bounds read while rendering GIF format images. An attacker could exploit this to crash Firefox. (CVE-2013-0772)

Boris Zbarsky discovered that Firefox did not properly handle some wrapped WebIDL objects. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox.
(CVE-2013-0765)

Bobby Holley discovered vulnerabilities in Chrome Object Wrappers (COW) and System Only Wrappers (SOW). If a user were tricked into opening a specially crafted page, a remote attacker could exploit this to bypass security protections to obtain sensitive information or potentially execute code with the privileges of the user invoking Firefox. (CVE-2013-0773)

Frederik Braun that Firefox made the location of the active browser profile available to JavaScript workers. (CVE-2013-0774)

A use-after-free vulnerability was discovered in Firefox. An attacker could potentially exploit this to execute code with the privileges of the user invoking Firefox. (CVE-2013-0775)

Michal Zalewski discovered that Firefox would not always show the correct address when cancelling a proxy authentication prompt. A remote attacker could exploit this to conduct URL spoofing and phishing attacks. (CVE-2013-0776)

Abhishek Arya discovered several problems related to memory handling.
If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. (CVE-2013-0777, CVE-2013-0778, CVE-2013-0779, CVE-2013-0780, CVE-2013-0781, CVE-2013-0782).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The installed version of Thunderbird ESR 17.x is potentially affected by the following security issues :

  - Numerous memory safety errors exist. (CVE-2013-0783)

  - An error exists related to Chrome Object Wrappers (COW)     or System Only Wrappers (SOW) that could allow security     bypass. (CVE-2013-0773)

  - The file system location of the active browser profile     could be disclosed and used in further attacks.
    (CVE-2013-0774)

  - A use-after-free error exists in the function     'nsImageLoadingContent'. (CVE-2013-0775)

  - Spoofing HTTPS URLs is possible due to an error related     to proxy '407' responses and embedded script code.
    (CVE-2013-0776)

  - A heap-based use-after-free error exists in the function     'nsOverflowContinuationTracker::Finish'. (CVE-2013-0780)

  - A heap-based buffer overflow error exists in the     function 'nsSaveAsCharset::DoCharsetConversion'.
    (CVE-2013-0782)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0271 advisory.

    firefox     [17.0.3-1.0.1]
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones

    [17.0.3-1]
    - Update to 17.0.3 ESR

    [17.0.2-4]
    - Added NM preferences

    [17.0.2-3]
    - Update to 17.0.2 ESR

    [17.0.1-2]
    - Update to 17.0.1 ESR

    [17.0-1]
    - Update to 17.0 ESR

    [17.0-0.2.b4]
    - Update to 17 Beta 4

    [17.0-0.1.beta1]
    - Update to 17 Beta 1


    libproxy     [0.3.0-4]
    - Rebuild against newer gecko

    xulrunner     [17.0.3-1.0.2]
    - Increase release number and rebuild.

    [17.0.3-1.0.1]
    - Replaced xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js
    - Removed XULRUNNER_VERSION from SOURCE21

    [17.0.3-1]
    - Update to 17.0.3 ESR

    [17.0.2-5]
    - Fixed NetworkManager preferences
    - Added fix for NM regression (mozbz#791626)

    [17.0.2-2]
    - Added fix for rhbz#816234 - NFS fix

    [17.0.2-1]
    - Update to 17.0.2 ESR

    [17.0.1-3]
    - Update to 17.0.1 ESR

    [17.0-1]
    - Update to 17.0 ESR

    [17.0-0.6.b5]
    - Update to 17 Beta 5
    - Updated fix for rhbz#872752 - embeded crash

    [17.0-0.5.b4]
    - Added fix for rhbz#872752 - embeded crash

    [17.0-0.4.b4]
    - Update to 17 Beta 4

    [17.0-0.3.b3]
    - Update to 17 Beta 3
    - Updated ppc(64) patch (mozbz#746112)

    [17.0-0.2.b2]
    - Built with system nspr/nss

    [17.0-0.1.b2]
    - Update to 17 Beta 2

    [17.0-0.1.b1]
    - Update to 17 Beta 1

    yelp     [2.28.1-17]
    - Rebuild against gecko 17.0.2

    [2.28.1-15]
    - Build fixes for gecko 17

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-196:02 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and     portability.
    Security issues fixed with this release:
     CVE-2013-0775     Use-after-free vulnerability in the nsImageLoadingContent::OnStopContainer function in Mozilla Firefox     before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before     17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code via crafted web     script.
     CVE-2013-0776     Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR     17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar     by operating a proxy server that provides a 407 HTTP status code accompanied by web script, as     demonstrated by a phishing attack on an HTTPS site.
     CVE-2013-0780     Use-after-free vulnerability in the nsOverflowContinuationTracker::Finish function in Mozilla Firefox     before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before     17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of     service (heap memory corruption) via a crafted document that uses Cascading Style Sheets (CSS) -moz-     column-* properties.
     CVE-2013-0782     Heap-based buffer overflow in the nsSaveAsCharset::DoCharsetConversion function in Mozilla Firefox before     19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and     SeaMonkey before 2.16 allows remote attackers to execute arbitrary code via unspecified vectors.
     CVE-2013-0783     Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0, Firefox ESR     17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before     2.16 allow remote attackers to cause a denial of service (memory corruption and application crash) or     possibly execute arbitrary code via unknown vectors.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The installed version of Firefox ESR 17.x is potentially affected by the following security issues :

   - Numerous memory safety errors exist. (CVE-2013-0783)

  - An error exists related to Chrome Object Wrappers (COW)     or System Only Wrappers (SOW) that could allow security     bypass. (CVE-2013-0773)

  - The file system location of the active browser profile     could be disclosed and used in further attacks.
    (CVE-2013-0774)

  - A use-after-free error exists in the function     'nsImageLoadingContent'. (CVE-2013-0775)

  - Spoofing HTTPS URLs is possible due to an error related     to proxy '407' responses and embedded script code.
    (CVE-2013-0776)

  - A heap-based use-after-free error exists in the function     'nsOverflowContinuationTracker::Finish'. (CVE-2013-0780)

  - A heap-based buffer overflow error exists in the     function 'nsSaveAsCharset::DoCharsetConversion'.
    (CVE-2013-0782)

The installed version of Firefox 18.x is potentially affected by the following security issues :

  - Numerous memory safety errors exist. (CVE-2013-0783,     CVE-2013-0784)

  - An out-of-bounds read error exists related to the     handling of GIF images. (CVE-2013-0772)

  - An error exists related to 'WebIDL' object wrapping     that has an unspecified impact. (CVE-2013-0765)

  - An error exists related to Chrome Object Wrappers (COW)     or System Only Wrappers (SOW) that could allow security     bypass. (CVE-2013-0773)

  - The file system location of the active browser profile     could be disclosed and used in further attacks.
    (CVE-2013-0774)

  - A use-after-free error exists in the function     'nsImageLoadingContent'. (CVE-2013-0775)

  - Spoofing HTTPS URLs is possible due to an error related     to proxy '407' responses and embedded script code.
    (CVE-2013-0776)

  - A heap-based use-after-free error exists in the function     'nsDisplayBoxShadowOuter::Paint'. (CVE-2013-0777)

  - An out-of-bounds read error exists in the function     'ClusterIterator::NextCluster'. (CVE-2013-0778)

  - An out-of-bounds read error exists in the function     'nsCodingStateMachine::NextState'. (CVE-2013-0779)

  - A heap-based use-after-free error exists in the function     'nsOverflowContinuationTracker::Finish'. (CVE-2013-0780)

  - A heap-based use-after-free error exists in the function     'nsPrintEngine::CommonPrint'. (CVE-2013-0781)

  - A heap-based buffer overflow error exists in the     function 'nsSaveAsCharset::DoCharsetConversion'.
    (CVE-2013-0782)

The installed version of Thunderbird is earlier than 17.0.3 and thus, is potentially affected by the following security issues :

  - Numerous memory safety errors exist. (CVE-2013-0783,     CVE-2013-0784)

  - An out-of-bounds read error exists related to the     handling of GIF images. (CVE-2013-0772)

  - An error exists related to 'WebIDL' object wrapping     that has an unspecified impact. (CVE-2013-0765)

  - An error exists related to Chrome Object Wrappers (COW)     or System Only Wrappers (SOW) that could allow security     bypass. (CVE-2013-0773)

  - The file system location of the active browser profile     could be disclosed and used in further attacks.
    (CVE-2013-0774)

  - A use-after-free error exists in the function     'nsImageLoadingContent'. (CVE-2013-0775)

  - Spoofing HTTPS URLs is possible due to an error related     to proxy '407' responses and embedded script code.
    (CVE-2013-0776)

  - A heap-based use-after-free error exists in the function     'nsDisplayBoxShadowOuter::Paint'. (CVE-2013-0777)

  - An out-of-bounds read error exists in the function     'ClusterIterator::NextCluster'. (CVE-2013-0778)

  - An out-of-bounds read error exists in the function     'nsCodingStateMachine::NextState'. (CVE-2013-0779)

  - A heap-based use-after-free error exists in the function     'nsOverflowContinuationTracker::Finish'. (CVE-2013-0780)

  - A heap-based use-after-free error exists in the function     'nsPrintEngine::CommonPrint'. (CVE-2013-0781)

  - A heap-based buffer overflow error exists in the     function 'nsSaveAsCharset::DoCharsetConversion'.
    (CVE-2013-0782)

The installed version of SeaMonkey is earlier than 2.16 and thus, is potentially affected by the following security issues :

  - Numerous memory safety errors exist. (CVE-2013-0783,     CVE-2013-0784)

  - An out-of-bounds read error exists related to the     handling of GIF images. (CVE-2013-0772)

  - An error exists related to 'WebIDL' object wrapping     that has an unspecified impact. (CVE-2013-0765)

  - An error exists related to Chrome Object Wrappers (COW)     or System Only Wrappers (SOW) that could allow security     bypass. (CVE-2013-0773)

  - The file system location of the active browser profile     could be disclosed and used in further attacks.
    (CVE-2013-0774)

  - A use-after-free error exists in the function     'nsImageLoadingContent'. (CVE-2013-0775)

  - Spoofing HTTPS URLs is possible due to an error related     to proxy '407' responses and embedded script code.
    (CVE-2013-0776)

  - A heap-based use-after-free error exists in the function     'nsDisplayBoxShadowOuter::Paint'. (CVE-2013-0777)

  - An out-of-bounds read error exists in the function     'ClusterIterator::NextCluster'. (CVE-2013-0778)

  - An out-of-bounds read error exists in the function     'nsCodingStateMachine::NextState'. (CVE-2013-0779)

  - A heap-based use-after-free error exists in the function     'nsOverflowContinuationTracker::Finish'. (CVE-2013-0780)

  - A heap-based use-after-free error exists in the function     'nsPrintEngine::CommonPrint'. (CVE-2013-0781)

  - A heap-based buffer overflow error exists in the     function 'nsSaveAsCharset::DoCharsetConversion'.
    (CVE-2013-0782)

An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Mozilla Thunderbird is a standalone mail and newsgroup client.

Several flaws were found in the processing of malformed content.
Malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2013-0775, CVE-2013-0780, CVE-2013-0782, CVE-2013-0783)

It was found that, after canceling a proxy server's authentication prompt, the address bar continued to show the requested site's address. An attacker could use this flaw to conduct phishing attacks by tricking a user into believing they are viewing trusted content.
(CVE-2013-0776)

Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Nils, Abhishek Arya, Olli Pettay, Christoph Diehl, Gary Kwong, Jesse Ruderman, Andrew McCreight, Joe Drew, Wayne Mery, and Michal Zalewski as the original reporters of these issues.

Note: All issues cannot be exploited by a specially crafted HTML mail message as JavaScript is disabled by default for mail messages. They could be exploited another way in Thunderbird, for example, when viewing the full remote content of an RSS feed.

Important: This erratum upgrades Thunderbird to version 17.0.3 ESR.
Thunderbird 17 is not completely backwards-compatible with all Mozilla add-ons and Thunderbird plug-ins that worked with Thunderbird 10.0.
Thunderbird 17 checks compatibility on first-launch, and, depending on the individual configuration and the installed add-ons and plug-ins, may disable said Add-ons and plug-ins, or attempt to check for updates and upgrade them. Add-ons and plug-ins may have to be manually updated.

All Thunderbird users should upgrade to this updated package, which contains Thunderbird version 17.0.3 ESR, which corrects these issues.
After installing the update, Thunderbird must be restarted for the changes to take effect.

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2013-0272 advisory.

    [17.0.3-1.0.1.el6_3]
    - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

    [17.0.3-1]
    - Update to 17.0.3 ESR

    [17.0.2-2]
    - Update to 17.0.2 ESR

    [17.0-2]
    - Update to 17.0 ESR

    [17.0b2-0.1]
    - Update to 17.0b2

    [17.0b1-0.1]
    - Rebase to 17 beta 1

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors, missing input sanitising vulnerabilities, use-after-free vulnerabilities, buffer overflows and other programming errors may lead to the execution of arbitrary code, privilege escalation, information leaks or cross-site-scripting.

We're changing the approach for security updates for Iceweasel, Icedove and Iceape in stable-security: Instead of backporting security fixes, we now provide releases based on the Extended Support Release branch. As such, this update introduces packages based on Firefox 17 and at some point in the future we will switch to the next ESR branch once ESR 17 has reached it's end of life.

Some Xul extensions currently packaged in the Debian archive are not compatible with the new browser engine. Up-to-date and compatible versions can be retrieved from http://addons.mozilla.org as a short term solution. A solution to keep packaged extensions compatible with the Mozilla releases is still being sorted out.

We don't have the resources to backport security fixes to the Iceweasel release in oldstable-security any longer. If you're up to the task and want to help, please get in touch with team@security.debian.org. Otherwise, we'll announce the end of security support for Iceweasel, Icedove and Iceape in Squeeze in the next update round.

ID	名稱	產品	系列	已發布	已更新	嚴重性
64698	Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : firefox vulnerabilities (USN-1729-1)	Nessus	Ubuntu Local Security Checks	2013/2/20	2019/9/19	critical
64725	Mozilla Thunderbird ESR 17.x < 17.0.3 Multiple Vulnerabilities	Nessus	Windows	2013/2/20	2019/12/4	critical
68732	Oracle Linux 5 / 6 : firefox (ELSA-2013-0271)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/23	high
289894	MiracleLinux 4 : firefox-17.0.3-1.0.1.AXS4, xulrunner-17.0.3-1.0.1.AXS4, libproxy-0.3.0-4.AXS4, yelp-2.28.1-17.AXS4 (AXSA:2013-196:02)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
64718	Firefox ESR 17.x < 17.0.3 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	2013/2/20	2026/3/3	critical
64719	Firefox 18.x Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	2013/2/20	2026/3/3	critical
64720	Thunderbird < 17.0.3 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	2013/2/20	2019/12/4	critical
64726	SeaMonkey < 2.16 Multiple Vulnerabilities	Nessus	Windows	2013/2/20	2026/5/27	critical
64729	CentOS 5 / 6 : thunderbird (CESA-2013:0272)	Nessus	CentOS Local Security Checks	2013/2/21	2021/1/4	high
68733	Oracle Linux 5 / 6 : thunderbird (ELSA-2013-0272)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	high
66766	Debian DSA-2699-1 : iceweasel - several vulnerabilities	Nessus	Debian Local Security Checks	2013/6/3	2024/6/18	critical

偵測

搜尋 Plugin

critical

critical

high

high

critical

critical

critical

critical

high

high

critical