CVE-2013-1683
published 2013-06-26CVE-2013-1683: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0 allow remote attackers to cause a denial of service (memory…
PriorityP338critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
5.40%
91.9th percentile
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | firefox | <= 21.0 | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat10.0CRITICAL
vendor_ubuntu10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Firefox regression
vendor_ubuntu·2013-07-03·CVSS 10.0
[CRITICAL] Firefox regression
Title: Firefox regression
Summary: USN-1890-1 introduced a regression in Firefox.
USN-1890-1 fixed vulnerabilities in Firefox. This update introduced a
regression which sometimes resulted in Firefox using the wrong network
proxy settings. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Multiple memory safety issues were discovered in Firefox. If the user were
tricked into opening a specially crafted page, an attacker could possibly
exploit these to cause a denial of service via application crash, or
potentially execute arbitrary code with the privileges of the user invoking
Firefox. (CVE-2013-1682, CVE-2013-1683)
Abhishek Arya discovered multiple use-after-free bugs. If the user were
tricked into opening a specially crafted page, an attac
Ubuntu
Firefox vulnerabilities
vendor_ubuntu·2013-06-26·CVSS 10.0
CVE-2013-1682 [CRITICAL] Firefox vulnerabilities
Title: Firefox vulnerabilities
Summary: Firefox could be made to crash or run programs as your login if it
opened a malicious website.
Multiple memory safety issues were discovered in Firefox. If the user were
tricked into opening a specially crafted page, an attacker could possibly
exploit these to cause a denial of service via application crash, or
potentially execute arbitrary code with the privileges of the user invoking
Firefox. (CVE-2013-1682, CVE-2013-1683)
Abhishek Arya discovered multiple use-after-free bugs. If the user were
tricked into opening a specially crafted page, an attacker could possibly
exploit these to execute arbitrary code with the privileges of the user
invoking Firefox. (CVE-2013-1684, CVE-2013-1685, CVE-2013-1686)
Mariusz Mlynski discovered that user defined
Red Hat
Mozilla: Miscellaneous memory safety hazards (rv:22.0) (MFSA 2013-49)
vendor_redhat·2013-06-25·CVSS 10.0
CVE-2013-1683 [CRITICAL] Mozilla: Miscellaneous memory safety hazards (rv:22.0) (MFSA 2013-49)
Mozilla: Miscellaneous memory safety hazards (rv:22.0) (MFSA 2013-49)
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Statement: This issue does not affect the version of firefox and thunderbird as shipped with Red Hat Enterprise Linux 5 and 6
Package: firefox (Red Hat Enterprise Linux 5) - Not affected
Package: thunderbird (Red Hat Enterprise Linux 5) - Not affected
Package: firefox (Red Hat Enterprise Linux 6) - Not affected
Package: thunderbird (Red Hat Enterprise Linux 6) - Not affected
GHSA
GHSA-v4wj-h2ff-v79j: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22
ghsa_unreviewed·2022-05-17
CVE-2013-1683 [HIGH] GHSA-v4wj-h2ff-v79j: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.htmlhttp://www.mozilla.org/security/announce/2013/mfsa2013-49.htmlhttp://www.ubuntu.com/usn/USN-1890-1https://bugzilla.mozilla.org/show_bug.cgi?id=822941https://bugzilla.mozilla.org/show_bug.cgi?id=834732https://bugzilla.mozilla.org/show_bug.cgi?id=846615https://bugzilla.mozilla.org/show_bug.cgi?id=851418https://bugzilla.mozilla.org/show_bug.cgi?id=862182https://bugzilla.mozilla.org/show_bug.cgi?id=863454https://bugzilla.mozilla.org/show_bug.cgi?id=865569https://bugzilla.mozilla.org/show_bug.cgi?id=865883https://bugzilla.mozilla.org/show_bug.cgi?id=876458https://bugzilla.mozilla.org/show_bug.cgi?id=877287https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17173http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.htmlhttp://www.mozilla.org/security/announce/2013/mfsa2013-49.htmlhttp://www.ubuntu.com/usn/USN-1890-1https://bugzilla.mozilla.org/show_bug.cgi?id=822941https://bugzilla.mozilla.org/show_bug.cgi?id=834732https://bugzilla.mozilla.org/show_bug.cgi?id=846615https://bugzilla.mozilla.org/show_bug.cgi?id=851418https://bugzilla.mozilla.org/show_bug.cgi?id=862182https://bugzilla.mozilla.org/show_bug.cgi?id=863454https://bugzilla.mozilla.org/show_bug.cgi?id=865569https://bugzilla.mozilla.org/show_bug.cgi?id=865883https://bugzilla.mozilla.org/show_bug.cgi?id=876458https://bugzilla.mozilla.org/show_bug.cgi?id=877287https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17173
2013-06-26
Published