CVE-2013-1682
published 2013-06-26CVE-2013-1682: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and…
PriorityP337critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
5.40%
91.8th percentile
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Affected
27 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | firefox | <= 21.0 | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | thunderbird | <= 17.0.6 | — |
| mozilla | thunderbird | — | — |
| mozilla | thunderbird | — | — |
| mozilla | thunderbird | — | — |
| mozilla | thunderbird | — | — |
| mozilla | thunderbird | — | — |
| mozilla | thunderbird | — | — |
| mozilla | thunderbird_esr | — | — |
| mozilla | thunderbird_esr | — | — |
| mozilla | thunderbird_esr | — | — |
| mozilla | thunderbird_esr | — | — |
| mozilla | thunderbird_esr | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat10.0CRITICAL
vendor_ubuntu10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Firefox regression
vendor_ubuntu·2013-07-03·CVSS 10.0
[CRITICAL] Firefox regression
Title: Firefox regression
Summary: USN-1890-1 introduced a regression in Firefox.
USN-1890-1 fixed vulnerabilities in Firefox. This update introduced a
regression which sometimes resulted in Firefox using the wrong network
proxy settings. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Multiple memory safety issues were discovered in Firefox. If the user were
tricked into opening a specially crafted page, an attacker could possibly
exploit these to cause a denial of service via application crash, or
potentially execute arbitrary code with the privileges of the user invoking
Firefox. (CVE-2013-1682, CVE-2013-1683)
Abhishek Arya discovered multiple use-after-free bugs. If the user were
tricked into opening a specially crafted page, an attac
Ubuntu
Thunderbird vulnerabilities
vendor_ubuntu·2013-06-26·CVSS 10.0
CVE-2013-1682 [CRITICAL] Thunderbird vulnerabilities
Title: Thunderbird vulnerabilities
Summary: Several security issues were fixed in Thunderbird.
Multiple memory safety issues were discovered in Thunderbird. If the user
were tricked into opening a specially crafted message with scripting
enabled, an attacker could possibly exploit these to cause a denial of
service via application crash, or potentially execute arbitrary code with
the privileges of the user invoking Thunderbird. (CVE-2013-1682)
Abhishek Arya discovered multiple use-after-free bugs. If the user were
tricked into opening a specially crafted message with scripting enabled,
an attacker could possibly exploit these to execute arbitrary code with
the privileges of the user invoking Thunderbird. (CVE-2013-1684,
CVE-2013-1685, CVE-2013-1686)
Mariusz Mlynski discovered that user
Ubuntu
Firefox vulnerabilities
vendor_ubuntu·2013-06-26·CVSS 10.0
CVE-2013-1682 [CRITICAL] Firefox vulnerabilities
Title: Firefox vulnerabilities
Summary: Firefox could be made to crash or run programs as your login if it
opened a malicious website.
Multiple memory safety issues were discovered in Firefox. If the user were
tricked into opening a specially crafted page, an attacker could possibly
exploit these to cause a denial of service via application crash, or
potentially execute arbitrary code with the privileges of the user invoking
Firefox. (CVE-2013-1682, CVE-2013-1683)
Abhishek Arya discovered multiple use-after-free bugs. If the user were
tricked into opening a specially crafted page, an attacker could possibly
exploit these to execute arbitrary code with the privileges of the user
invoking Firefox. (CVE-2013-1684, CVE-2013-1685, CVE-2013-1686)
Mariusz Mlynski discovered that user defined
Red Hat
Mozilla: Miscellaneous memory safety hazards (rv:17.0.7) (MFSA 2013-49)
vendor_redhat·2013-06-25·CVSS 10.0
CVE-2013-1682 [CRITICAL] Mozilla: Miscellaneous memory safety hazards (rv:17.0.7) (MFSA 2013-49)
Mozilla: Miscellaneous memory safety hazards (rv:17.0.7) (MFSA 2013-49)
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Package: thunderbird (Red Hat Enterprise Linux 5) - Affected
GHSA
GHSA-3823-3p6j-72p3: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22
ghsa_unreviewed·2022-05-17
CVE-2013-1682 [HIGH] GHSA-3823-3p6j-72p3: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0981.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0982.htmlhttp://www.debian.org/security/2013/dsa-2716http://www.debian.org/security/2013/dsa-2720http://www.mozilla.org/security/announce/2013/mfsa2013-49.htmlhttp://www.securityfocus.com/bid/60765http://www.ubuntu.com/usn/USN-1890-1http://www.ubuntu.com/usn/USN-1891-1https://bugzilla.mozilla.org/show_bug.cgi?id=830389https://bugzilla.mozilla.org/show_bug.cgi?id=840098https://bugzilla.mozilla.org/show_bug.cgi?id=862309https://bugzilla.mozilla.org/show_bug.cgi?id=867482https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17392http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0981.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0982.htmlhttp://www.debian.org/security/2013/dsa-2716http://www.debian.org/security/2013/dsa-2720http://www.mozilla.org/security/announce/2013/mfsa2013-49.htmlhttp://www.securityfocus.com/bid/60765http://www.ubuntu.com/usn/USN-1890-1http://www.ubuntu.com/usn/USN-1891-1https://bugzilla.mozilla.org/show_bug.cgi?id=830389https://bugzilla.mozilla.org/show_bug.cgi?id=840098https://bugzilla.mozilla.org/show_bug.cgi?id=862309https://bugzilla.mozilla.org/show_bug.cgi?id=867482https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17392
2013-06-26
Published