CVE-2013-1728 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Firefox

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer7 documents6 sources
Severity
4.3MEDIUMNVD
EPSS
1.1%
top 22.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla FirefoxMozilla SeamonkeyMozilla Thunderbird
Timeline
PublishedSep 18
Latest updateMay 17

Description

The IonMonkey JavaScript engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21, when Valgrind mode is used, does not properly initialize memory, which makes it easier for remote attackers to obtain sensitive information via unspecified vectors.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages3 packages

▶NVDmozilla/firefox23.0.1+8
▶NVDmozilla/seamonkey2.20+36
▶NVDmozilla/thunderbird17.0.9+9

🔴Vulnerability Details

2
GHSA
GHSA-8xf9-5g8v-9qwx: The IonMonkey JavaScript engine in Mozilla Firefox before 24↗2022-05-17
▶
CVEList
CVE-2013-1728: The IonMonkey JavaScript engine in Mozilla Firefox before 24↗2013-09-18
▶

📋Vendor Advisories

3
Ubuntu
Thunderbird vulnerabilities↗2013-09-18
▶
Red Hat
Mozilla: Uninitialized data in IonMonkey (MFSA 2013-85)↗2013-09-17
▶
Ubuntu
Firefox vulnerabilities↗2013-09-17
▶

💬Community

1
Bugzilla
CVE-2013-1728 Mozilla: Uninitialized data in IonMonkey (MFSA 2013-85)↗2013-09-18
▶
CVE-2013-1728 — Mozilla Firefox vulnerability | cvebase