Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-0775 State: PUBLISHED Published: 2013-02-19T23:00:00 Last Updated: 2024-08-06T14:41:47.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsImageLoadingContent::OnStopContainer function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code via crafted web script. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16950 - http://www.debian.org/security/2013/dsa-2699 - https://bugzil
ry/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16950 - http://www.debian.org/security/2013/dsa-2699 - https://bugzilla.mozilla.org/show_bug.cgi?id=831095 - http://www.mozilla.org/security/announce/2013/mfsa2013-26.html - http://www.ubuntu.com/usn/USN-1729-1 - http://www.ubuntu.com/usn/USN-1729-2 - http://www.ubuntu.com/usn/USN-1748-1 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html - http://rhn.redhat.com/errata/RHSA-2013-0271.html - http://rhn.redhat.com/errata/RHSA-2013-0272.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html
CVE ID: CVE-2013-0776 State: PUBLISHED Published: 2013-02-19T23:00:00 Last Updated: 2024-08-06T14:41:47.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web script, as demonstrated by a phishing attack on an HTTPS site. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2699 - http://www.ubuntu.com/usn/USN-1729-1 - http://www.ubuntu.com/usn
ences: - http://www.debian.org/security/2013/dsa-2699 - http://www.ubuntu.com/usn/USN-1729-1 - http://www.ubuntu.com/usn/USN-1729-2 - http://www.mozilla.org/security/announce/2013/mfsa2013-27.html - http://www.ubuntu.com/usn/USN-1748-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=796475 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html - http://rhn.redhat.com/errata/RHSA-2013-0271.html - http://rhn.redhat.com/errata/RHSA-2013-0272.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16666 - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html
CVE ID: CVE-2013-0777 State: PUBLISHED Published: 2013-02-19T23:00:00 Last Updated: 2024-08-06T14:41:47.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsDisplayBoxShadowOuter::Paint function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=798691 - http://www.ubuntu.com/usn/USN-1729-1 - http://www.ubuntu.com/usn/USN-1729-2 - http://www.ubuntu.com/usn/USN-1748-1 - http:/
p://www.ubuntu.com/usn/USN-1729-1 - http://www.ubuntu.com/usn/USN-1729-2 - http://www.ubuntu.com/usn/USN-1748-1 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html - http://www.mozilla.org/security/announce/2013/mfsa2013-28.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16977
CVE ID: CVE-2013-0778 State: PUBLISHED Published: 2013-02-19T23:00:00 Last Updated: 2024-08-06T14:41:47.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ClusterIterator::NextCluster function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1729-1 - http://www.ubuntu.com/usn/USN-1729-2 - http://www.ubuntu.com/usn/USN-1748-1 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html - http://www.mozilla.org/security
.com/usn/USN-1748-1 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html - http://www.mozilla.org/security/announce/2013/mfsa2013-28.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16619 - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html - https://bugzilla.mozilla.org/show_bug.cgi?id=798867
CVE ID: CVE-2013-0779 State: PUBLISHED Published: 2013-02-19T23:00:00 Last Updated: 2024-08-06T14:41:47.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsCodingStateMachine::NextState function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1729-1 - http://www.ubuntu.com/usn/USN-1729-2 - http://www.ubuntu.com/usn/USN-1748-1 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html - https://bugzilla.mozilla.org
ntu.com/usn/USN-1748-1 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html - https://bugzilla.mozilla.org/show_bug.cgi?id=801330 - http://www.mozilla.org/security/announce/2013/mfsa2013-28.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16747 - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html
CVE ID: CVE-2013-0780 State: PUBLISHED Published: 2013-02-19T23:00:00 Last Updated: 2024-08-06T14:41:47.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsOverflowContinuationTracker::Finish function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted document that uses Cascading Style Sheets (CSS) -moz-column-* properties. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa
n-* properties. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2699 - http://www.ubuntu.com/usn/USN-1729-1 - http://www.ubuntu.com/usn/USN-1729-2 - https://bugzilla.mozilla.org/show_bug.cgi?id=812893 - http://www.ubuntu.com/usn/USN-1748-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16383 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html - http://rhn.redhat.com/errata/RHSA-2013-0271.html - http://rhn.redhat.com/errata/RHSA-2013-0272.html - http://www.mozilla.org/security/announce/2013/mfsa2013-28.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.ht
a.org/security/announce/2013/mfsa2013-28.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html
CVE ID: CVE-2013-0781 State: PUBLISHED Published: 2013-02-19T23:00:00 Last Updated: 2024-08-06T14:41:47.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsPrintEngine::CommonPrint function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1729-1 - http://www.ubuntu.com/usn/USN-1729-2 - http://www.ubuntu.com/usn/USN-1748-1 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html
usn/USN-1729-2 - http://www.ubuntu.com/usn/USN-1748-1 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html - http://www.mozilla.org/security/announce/2013/mfsa2013-28.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16934 - https://bugzilla.mozilla.org/show_bug.cgi?id=821991
CVE ID: CVE-2013-0782 State: PUBLISHED Published: 2013-02-19T23:00:00 Last Updated: 2024-08-06T14:41:47.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the nsSaveAsCharset::DoCharsetConversion function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2699 - http://www.ubuntu.com/usn/USN-1729-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre
-2699 - http://www.ubuntu.com/usn/USN-1729-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16906 - http://www.ubuntu.com/usn/USN-1729-2 - http://www.ubuntu.com/usn/USN-1748-1 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html - http://rhn.redhat.com/errata/RHSA-2013-0271.html - http://rhn.redhat.com/errata/RHSA-2013-0272.html - http://www.mozilla.org/security/announce/2013/mfsa2013-28.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html - https://bugzilla.mozilla.org/show_bug.cgi?id=827070
CVE ID: CVE-2013-0783 State: PUBLISHED Published: 2013-02-19T23:00:00 Last Updated: 2024-08-06T14:41:47.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2699 - https://bugzilla.mozilla.org/show_bug.cgi?id=761448 - http
References: - http://www.debian.org/security/2013/dsa-2699 - https://bugzilla.mozilla.org/show_bug.cgi?id=761448 - https://bugzilla.mozilla.org/show_bug.cgi?id=830975 - http://www.ubuntu.com/usn/USN-1729-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=818241 - http://www.mozilla.org/security/announce/2013/mfsa2013-21.html - http://www.ubuntu.com/usn/USN-1729-2 - http://www.ubuntu.com/usn/USN-1748-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=690970 - https://bugzilla.mozilla.org/show_bug.cgi?id=812380 - https://bugzilla.mozilla.org/show_bug.cgi?id=830399 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html - http://rhn.redhat.com/errata/RHSA-2013-0271.html - http://rhn.red
.opensuse.org/opensuse-updates/2013-02/msg00062.html - http://rhn.redhat.com/errata/RHSA-2013-0271.html - http://rhn.redhat.com/errata/RHSA-2013-0272.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16219 - https://bugzilla.mozilla.org/show_bug.cgi?id=822858 - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html - https://bugzilla.mozilla.org/show_bug.cgi?id=826471 - https://bugzilla.mozilla.org/show_bug.cgi?id=780549 - https://bugzilla.mozilla.org/show_bug.cgi?id=832162
CVE ID: CVE-2013-0784 State: PUBLISHED Published: 2013-02-19T23:00:00 Last Updated: 2024-08-06T14:41:47.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=790373 - https://bugzilla.mozilla.org/show_bug.cgi?id=801114 - https://bugzilla.mozilla.org/show_bug.cgi?id=766452 - https://bug
https://bugzilla.mozilla.org/show_bug.cgi?id=801114 - https://bugzilla.mozilla.org/show_bug.cgi?id=766452 - https://bugzilla.mozilla.org/show_bug.cgi?id=830943 - https://bugzilla.mozilla.org/show_bug.cgi?id=799803 - https://bugzilla.mozilla.org/show_bug.cgi?id=809295 - http://www.ubuntu.com/usn/USN-1729-1 - http://www.mozilla.org/security/announce/2013/mfsa2013-21.html - http://www.ubuntu.com/usn/USN-1729-2 - http://www.ubuntu.com/usn/USN-1748-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=810169 - https://bugzilla.mozilla.org/show_bug.cgi?id=819635 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html - https://bugzilla.mozilla.org/show_bug.cgi?id=827687 - https://bugzilla.m
se.org/opensuse-updates/2013-02/msg00062.html - https://bugzilla.mozilla.org/show_bug.cgi?id=827687 - https://bugzilla.mozilla.org/show_bug.cgi?id=805294 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17119 - https://bugzilla.mozilla.org/show_bug.cgi?id=799907 - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html - https://bugzilla.mozilla.org/show_bug.cgi?id=797977
CVE ID: CVE-2013-0785 State: PUBLISHED Published: 2013-02-24T11:00:00 Last Updated: 2024-08-06T14:41:47.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in show_bug.cgi in Bugzilla before 3.6.13, 3.7.x and 4.0.x before 4.0.10, 4.1.x and 4.2.x before 4.2.5, and 4.3.x and 4.4.x before 4.4rc2 allows remote attackers to inject arbitrary web script or HTML via the id parameter in conjunction with an invalid value of the format parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2013:066 - https://bugzilla.mozilla.org/show_bug.cgi?id=842038 - http://www.bugzilla.or
m/security/advisories?name=MDVSA-2013:066 - https://bugzilla.mozilla.org/show_bug.cgi?id=842038 - http://www.bugzilla.org/security/3.6.12/
CVE ID: CVE-2013-0786 State: PUBLISHED Published: 2013-02-24T11:00:00 Last Updated: 2024-08-06T14:41:47.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bugzilla::Search::build_subselect function in Bugzilla 2.x and 3.x before 3.6.13 and 3.7.x and 4.0.x before 4.0.10 generates different error messages for invalid product queries depending on whether a product exists, which allows remote attackers to discover private product names by using debug mode for a query. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2013:066 - https://bugzilla.mozilla.org/show_bug.cgi?id=824399 - http://www.bugzilla.org/secur
ity/advisories?name=MDVSA-2013:066 - https://bugzilla.mozilla.org/show_bug.cgi?id=824399 - http://www.bugzilla.org/security/3.6.12/
CVE ID: CVE-2013-0787 State: PUBLISHED Published: 2013-03-11T10:00:00 Last Updated: 2024-08-06T14:41:47.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsEditor::IsPreformatted function in editor/libeditor/base/nsEditor.cpp in Mozilla Firefox before 19.0.2, Firefox ESR 17.x before 17.0.4, Thunderbird before 17.0.4, Thunderbird ESR 17.x before 17.0.4, and SeaMonkey before 2.16.1 allows remote attackers to execute arbitrary code via vectors involving an execCommand call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1758-1 - http://www.debian.org/security/2013/dsa-2699 - http://twitter.com/VUPE
erences: - http://www.ubuntu.com/usn/USN-1758-1 - http://www.debian.org/security/2013/dsa-2699 - http://twitter.com/VUPEN/statuses/309505403631325184 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16737 - http://twitter.com/thezdi/statuses/309484730506698752 - http://www.securityfocus.com/bid/58391 - https://bugzilla.mozilla.org/show_bug.cgi?id=848644 - http://rhn.redhat.com/errata/RHSA-2013-0614.html - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00023.html - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00025.html - http://lists.opensus
013-03/msg00023.html - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00028.html - http://www.mozilla.org/security/announce/2013/mfsa2013-29.html - http://rhn.redhat.com/errata/RHSA-2013-0627.html - http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157
CVE ID: CVE-2013-0788 State: PUBLISHED Published: 2013-04-03T10:00:00 Last Updated: 2024-08-06T14:41:47.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=635852 - https://bugzilla.mozilla.org/show_bug.cgi?id=834240
References: - https://bugzilla.mozilla.org/show_bug.cgi?id=635852 - https://bugzilla.mozilla.org/show_bug.cgi?id=834240 - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html - http://www.ubuntu.com/usn/USN-1791-1 - http://www.debian.org/security/2013/dsa-2699 - https://bugzilla.mozilla.org/show_bug.cgi?id=840353 - https://bugzilla.mozilla.org/show_bug.cgi?id=784730 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html - https://bugzilla.mozilla.org/show_bug.cgi?id=813442 - https://bugzilla.mozilla.org/show_bug.cgi?id=839621 - http://www.mozilla.org/security/announce/2013/mfsa2013-30.html - https://bugzilla.mozilla.org/show_bug.cgi?id=827870 - ht
ttp://www.mozilla.org/security/announce/2013/mfsa2013-30.html - https://bugzilla.mozilla.org/show_bug.cgi?id=827870 - http://rhn.redhat.com/errata/RHSA-2013-0696.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16629 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html - https://bugzilla.mozilla.org/show_bug.cgi?id=771942 - https://bugzilla.mozilla.org/show_bug.cgi?id=852923 - http://rhn.redhat.com/errata/RHSA-2013-0697.html - https://bugzilla.mozilla.org/show_bug.cgi?id=840263 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html
CVE ID: CVE-2013-0789 State: PUBLISHED Published: 2013-04-03T10:00:00 Last Updated: 2024-08-06T14:41:47.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0 and SeaMonkey before 2.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsContentUtils::HoldJSObjects function and the nsAutoPtr class, and other vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=830595 - https://bugzilla.mozilla.org/show_bug.cgi?id=837714 - http
nces: - https://bugzilla.mozilla.org/show_bug.cgi?id=830595 - https://bugzilla.mozilla.org/show_bug.cgi?id=837714 - https://bugzilla.mozilla.org/show_bug.cgi?id=835499 - https://bugzilla.mozilla.org/show_bug.cgi?id=824856 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html - https://bugzilla.mozilla.org/show_bug.cgi?id=824643 - https://bugzilla.mozilla.org/show_bug.cgi?id=831055 - http://www.mozilla.org/security/announce/2013/mfsa2013-30.html - https://bugzilla.mozilla.org/show_bug.cgi?id=839209 - https://bugzilla.mozilla.org/show_bug.cgi?id=842300 - https://bugzilla.mozilla.org/show_bug.cgi?id=817841 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg
- https://bugzilla.mozilla.org/show_bug.cgi?id=817841 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html - https://bugzilla.mozilla.org/show_bug.cgi?id=849014 - https://bugzilla.mozilla.org/show_bug.cgi?id=808736 - https://bugzilla.mozilla.org/show_bug.cgi?id=827596 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17079 - https://bugzilla.mozilla.org/show_bug.cgi?id=815315 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html
CVE ID: CVE-2013-0790 State: PUBLISHED Published: 2013-04-03T10:00:00 Last Updated: 2024-08-06T14:41:47.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the browser engine in Mozilla Firefox before 20.0 on Android allows remote attackers to cause a denial of service (stack memory corruption and application crash) or possibly execute arbitrary code via unknown vectors involving a plug-in. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=842687 - http://www.mozilla.org/security/announce/2013/mfsa2013-30.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html
CVE ID: CVE-2013-0791 State: PUBLISHED Published: 2013-04-03T10:00:00 Last Updated: 2024-08-06T14:41:47.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - ht
Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html - http://www.ubuntu.com/usn/USN-1791-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17150 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html - http://rhn.redhat.com/errata/RHSA-2013-1135.html - http://www.mozilla.org/security/announce/2013/mfsa2013-40.html - http://www.securityfocus.com/bid/58826 - http://rhn.redhat.com/errata/RHSA-2013-1144.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 - http://lists.opensus
.com/errata/RHSA-2013-1144.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html - https://bugzilla.mozilla.org/show_bug.cgi?id=629816 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html
CVE ID: CVE-2013-0792 State: PUBLISHED Published: 2013-04-03T10:00:00 Last Updated: 2024-08-06T14:41:47.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 20.0 and SeaMonkey before 2.17, when gfx.color_management.enablev4 is used, do not properly handle color profiles during PNG rendering, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a grayscale PNG image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.htm