Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-0758 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:41:47.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging improper interaction between plugin objects and SVG elements. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - https://oval.cisecurity.org/repos
rences: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17087 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://rhn.redhat.com/errata/RHSA-2013-0145.html - http://www.ubuntu.com/usn/USN-1681-4 - http://rhn.redhat.com/errata/RHSA-2013-0144.html - https://bugzilla.mozilla.org/show_bug.cgi?id=813906 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.mozilla.org/security/announce/2013/mfsa2013-15.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg0
a2013-15.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu.com/usn/USN-1681-2
CVE ID: CVE-2013-0759 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:41:47.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to spoof the address bar via vectors involving authentication information in the userinfo field of a URL, in conjunction with a 204 (aka No Content) HTTP status code. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - ht
: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://rhn.redhat.com/errata/RHSA-2013-0145.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16827 - http://www.ubuntu.com/usn/USN-1681-4 - http://rhn.redhat.com/errata/RHSA-2013-0144.html - http://www.mozilla.org/security/announce/2013/mfsa2013-04.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.
www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu.com/usn/USN-1681-2 - https://bugzilla.mozilla.org/show_bug.cgi?id=802026
CVE ID: CVE-2013-0760 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:41:47.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the CharDistributionAnalysis::HandleOneChar function in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - https://bugzilla.mozilla.org/show_bug.cgi?id=780979 - http://www.mozilla.org/secur
rity-announce/2013-01/msg00010.html - https://bugzilla.mozilla.org/show_bug.cgi?id=780979 - http://www.mozilla.org/security/announce/2013/mfsa2013-02.html - http://www.ubuntu.com/usn/USN-1681-4 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17086 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu.com/usn/USN-1681-2
CVE ID: CVE-2013-0761 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:41:47.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the mozilla::TrackUnionStream::EndTrack implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16832 - htt
tainer: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16832 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://www.mozilla.org/security/announce/2013/mfsa2013-02.html - https://bugzilla.mozilla.org/show_bug.cgi?id=787831 - http://www.ubuntu.com/usn/USN-1681-4 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu.com/usn/USN-1681-2
CVE ID: CVE-2013-0762 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:41:47.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the imgRequest::OnStopFrame function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg0000
alyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16288 - http://www.securityfocus.com/bid/57193 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://www.mozilla.org/security/announce/2013/mfsa2013-02.html - http://rhn.redhat.com/errata/RHSA-2013-0145.html - http://www.ubuntu.com/usn/USN-1681-4 - http://rhn.redhat.com/errata/RHSA-2013-0144.html - https://bugzilla.mozilla.org/show_bug.cgi?id=788959 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com
w_bug.cgi?id=788959 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu.com/usn/USN-1681-2
CVE ID: CVE-2013-0763 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:41:47.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to Mesa drivers and a resized WebGL canvas. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - https://oval.cisecurity.org/repository/s
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17107 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://www.mozilla.org/security/announce/2013/mfsa2013-02.html - http://www.ubuntu.com/usn/USN-1681-4 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - https://bugzilla.mozilla.org/show_bug.cgi?id=791905 - http://www.ubuntu.com/usn/USN-1681-2
CVE ID: CVE-2013-0764 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:41:47.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsSOCKSSocketInfo::ConnectToProxy function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not ensure thread safety for SSL sessions, which allows remote attackers to execute arbitrary code via crafted data, as demonstrated by e-mail message data. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - https://oval.cisecurity.org/
References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16715 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://www.ubuntu.com/usn/USN-1681-4 - https://bugzilla.mozilla.org/show_bug.cgi?id=804237 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.mozilla.org/security/announce/2013/mfsa2013-07.html - http://www.ubuntu.com/usn/USN-1681-2
CVE ID: CVE-2013-0765 State: PUBLISHED Published: 2013-02-19T23:00:00 Last Updated: 2024-08-06T14:41:47.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 do not prevent multiple wrapping of WebIDL objects, which allows remote attackers to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1729-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=830614 - http://www.ubuntu.com/usn/USN-1729-2 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html - http://www.mozilla.org/security/announce
USN-1729-2 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html - http://www.mozilla.org/security/announce/2013/mfsa2013-23.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17097
CVE ID: CVE-2013-0766 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:41:47.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the ~nsHTMLEditRules implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006
lyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://www.securityfocus.com/bid/57194 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://www.mozilla.org/security/announce/2013/mfsa2013-02.html - http://rhn.redhat.com/errata/RHSA-2013-0145.html - http://www.ubuntu.com/usn/USN-1681-4 - http://rhn.redhat.com/errata/RHSA-2013-0144.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu.com/usn/USN-1681-2 - https://oval.cis
.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu.com/usn/USN-1681-2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16189 - https://bugzilla.mozilla.org/show_bug.cgi?id=803853
CVE ID: CVE-2013-0767 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:41:47.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.o
ram Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://www.mozilla.org/security/announce/2013/mfsa2013-02.html - http://rhn.redhat.com/errata/RHSA-2013-0145.html - http://www.ubuntu.com/usn/USN-1681-4 - http://rhn.redhat.com/errata/RHSA-2013-0144.html - https://bugzilla.mozilla.org/show_bug.cgi?id=812161 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.securityfocus.com/bid/57195 - https://oval.cisecurity
.org/opensuse-security-announce/2013-01/msg00017.html - http://www.securityfocus.com/bid/57195 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16171 - http://www.ubuntu.com/usn/USN-1681-2
CVE ID: CVE-2013-0768 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:41:47.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Canvas implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via an HTML document that specifies invalid width and height values. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/
use.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://www.ubuntu.com/usn/USN-1681-4 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16990 - http://www.mozilla.org/security/announce/2013/mfsa2013-03.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu.com/usn/USN-1681-2 - https://bugzilla.mozilla.org/show_bug.cgi?id=815795
CVE ID: CVE-2013-0769 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:41:47.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=811382 - htt
ditional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=811382 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - https://bugzilla.mozilla.org/show_bug.cgi?id=801195 - http://www.palemoon.org/releasenotes-ng.shtml - http://www.mozilla.org/security/announce/2013/mfsa2013-01.html - http://rhn.redhat.com/errata/RHSA-2013-0145.html - http://www.ubuntu.com/usn/USN-1681-4 - http://rhn.redhat.com/errata/RHSA-2013-0144.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16199 - http://lists.opensuse.org/
ttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16199 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - https://bugzilla.mozilla.org/show_bug.cgi?id=806483 - http://www.ubuntu.com/usn/USN-1681-2 - https://bugzilla.mozilla.org/show_bug.cgi?id=768243 - https://bugzilla.mozilla.org/show_bug.cgi?id=809064
CVE ID: CVE-2013-0770 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:41:47.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=768750 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-securit
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://www.palemoon.org/releasenotes-ng.shtml - http://www.mozilla.org/security/announce/2013/mfsa2013-01.html - http://www.ubuntu.com/usn/USN-1681-4 - https://bugzilla.mozilla.org/show_bug.cgi?id=756581 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - https://bugzilla.mozilla.org/show_bug.cgi?id=787818 - https://bugzilla.mozilla.org/show_bug.cgi?id=795284 - http://www.ubuntu.com/usn/USN-1681-2 -
rg/show_bug.cgi?id=787818 - https://bugzilla.mozilla.org/show_bug.cgi?id=795284 - http://www.ubuntu.com/usn/USN-1681-2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16813
CVE ID: CVE-2013-0771 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:41:47.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the gfxTextRun::ShrinkToLigatureBoundaries function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17019 - http://lists.opensuse.org/opensuse-security-announce/2013-01/ms
/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17019 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://www.mozilla.org/security/announce/2013/mfsa2013-02.html - http://www.ubuntu.com/usn/USN-1681-4 - https://bugzilla.mozilla.org/show_bug.cgi?id=785555 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu.com/usn/USN-1681-2
CVE ID: CVE-2013-0772 State: PUBLISHED Published: 2013-02-19T23:00:00 Last Updated: 2024-08-06T14:41:47.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) via a crafted GIF image. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2013/mfsa2013-22.html - http://www.ubuntu.com/usn/USN-1729-1 - http://www.ubuntu.com/usn/USN-1729-2 - http://lists.opensuse.org/op
013-22.html - http://www.ubuntu.com/usn/USN-1729-1 - http://www.ubuntu.com/usn/USN-1729-2 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html - https://bugzilla.mozilla.org/show_bug.cgi?id=801366 - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html - http://rhn.redhat.com/errata/RHSA-2013-1812.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17159
CVE ID: CVE-2013-0773 State: PUBLISHED Published: 2013-02-19T23:00:00 Last Updated: 2024-08-06T14:41:47.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chrome Object Wrapper (COW) and System Only Wrapper (SOW) implementations in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent modifications to a prototype, which allows remote attackers to obtain sensitive information from chrome objects or possibly execute arbitrary JavaScript code with chrome privileges via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.debia
ome privileges via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2699 - http://www.ubuntu.com/usn/USN-1729-1 - http://www.ubuntu.com/usn/USN-1729-2 - http://www.ubuntu.com/usn/USN-1748-1 - http://www.mozilla.org/security/announce/2013/mfsa2013-24.html - http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16861 - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html - https://bugzilla.mozilla.org/show_bug.cgi?id=809652
CVE ID: CVE-2013-0774 State: PUBLISHED Published: 2013-02-19T23:00:00 Last Updated: 2024-08-06T14:41:47.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent JavaScript workers from reading the browser-profile directory name, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1729-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16797 - http://www.ubuntu.com/usn/USN-1729-2 - http:
rity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16797 - http://www.ubuntu.com/usn/USN-1729-2 - http://www.ubuntu.com/usn/USN-1748-1 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html - https://bugzilla.mozilla.org/show_bug.cgi?id=827193 - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html - http://www.mozilla.org/security/announce/2013/mfsa2013-25.html