Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-1723 State: PUBLISHED Published: 2013-09-18T10:00:00 Last Updated: 2024-08-06T15:13:32.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NativeKey widget in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 processes key messages after destruction by a dispatched event listener, which allows remote attackers to cause a denial of service (application crash) by leveraging incorrect event usage after widget-memory reallocation. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/1
.org/opensuse-updates/2013-09/msg00055.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19028 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - https://bugzilla.mozilla.org/show_bug.cgi?id=891292 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html - http://www.mozilla.org/security/announce/2013/mfsa2013-80.html - http://www.securityfocus.com/bid/62472 - http
61.html - http://www.mozilla.org/security/announce/2013/mfsa2013-80.html - http://www.securityfocus.com/bid/62472 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html
CVE ID: CVE-2013-1724 State: PUBLISHED Published: 2013-09-18T10:00:00 Last Updated: 2024-08-06T15:13:32.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the mozilla::dom::HTMLFormElement::IsDefaultSubmitElement function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving a destroyed SELECT element. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - https://oval.cisecurity.org/repository/search/definition/oval%3A
s.opensuse.org/opensuse-updates/2013-09/msg00055.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18982 - https://bugzilla.mozilla.org/show_bug.cgi?id=894137 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - http://www.mozilla.org/security/announce/2013/mfsa2013-81.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - http://www.ubuntu.com/usn/USN-1952-1 - http://www.ubuntu.com/usn/USN-1951-1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html - http://www.securityfocus
2013-September/117526.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html - http://www.securityfocus.com/bid/62464 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html
CVE ID: CVE-2013-1725 State: PUBLISHED Published: 2013-09-18T10:00:00 Last Updated: 2024-08-06T15:13:32.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not ensure that initialization occurs for JavaScript objects with compartments, which allows remote attackers to execute arbitrary code by leveraging incorrect scope handling. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - http://www.mozilla.org/security/announce/2013/mfsa2013-82.html - https://
e.org/opensuse-updates/2013-09/msg00055.html - http://www.mozilla.org/security/announce/2013/mfsa2013-82.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19025 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - http://www.ubuntu.com/usn/USN-1952-1 - http://www.ubuntu.com/usn/USN-1951-1 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - http://lis
013-11/msg00005.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html - http://www.securityfocus.com/bid/62467 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html - https://bugzilla.mozilla.org/show_bug.cgi?id=876762 - http://rhn.redhat.com/errata/RHSA-2013-1268.html - http://rhn.redhat.com/errata/RHSA-2013-1269.html - http://www.debian.org/security/2013/dsa-2762 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html
CVE ID: CVE-2013-1726 State: PUBLISHED Published: 2013-09-18T10:00:00 Last Updated: 2024-08-06T15:13:31.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Updater in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 does not ensure exclusive access to a MAR file, which allows local users to gain privileges by creating a Trojan horse file after MAR signature verification but before MAR use. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18821 - http://lists.fedoraproject.o
ps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18821 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - https://bugzilla.mozilla.org/show_bug.cgi?id=890853 - http://www.mozilla.org/security/announce/2013/mfsa2013-83.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html
CVE ID: CVE-2013-1727 State: PUBLISHED Published: 2013-09-18T10:00:00 Last Updated: 2024-08-06T15:13:31.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 24.0 on Android allows attackers to bypass the Same Origin Policy, and consequently conduct cross-site scripting (XSS) attacks or obtain password or cookie information, by using a symlink in conjunction with a file: URL for a local file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - http://www.mozilla.org/security/
http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - http://www.mozilla.org/security/announce/2013/mfsa2013-84.html - https://bugzilla.mozilla.org/show_bug.cgi?id=782581 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html
CVE ID: CVE-2013-1728 State: PUBLISHED Published: 2013-09-18T10:00:00 Last Updated: 2024-08-06T15:13:32.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IonMonkey JavaScript engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21, when Valgrind mode is used, does not properly initialize memory, which makes it easier for remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18902 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - http://www.securityfocus
g.mitre.oval%3Adef%3A18902 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - http://www.securityfocus.com/bid/62468 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - http://www.ubuntu.com/usn/USN-1952-1 - http://www.ubuntu.com/usn/USN-1951-1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html - http://www.mozilla.org/security/announce/2013/mfsa2013-85.html - https://bugzilla.mozilla.
dates/2013-09/msg00061.html - http://www.mozilla.org/security/announce/2013/mfsa2013-85.html - https://bugzilla.mozilla.org/show_bug.cgi?id=883686 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html
CVE ID: CVE-2013-1729 State: PUBLISHED Published: 2013-09-18T10:00:00 Last Updated: 2024-08-06T15:13:32.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA graphics drivers are used on Mac OS X, allows remote attackers to obtain desktop-screenshot data by reading from a CANVAS element. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - http://www.mozilla.org/security/announce/2013/mfsa2013-86.html - http://lists.fedoraproject.o
13-September/116610.html - http://www.mozilla.org/security/announce/2013/mfsa2013-86.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - https://bugzilla.mozilla.org/show_bug.cgi?id=879656
CVE ID: CVE-2013-1730 State: PUBLISHED Published: 2013-09-18T10:00:00 Last Updated: 2024-08-06T15:13:32.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly handle movement of XBL-backed nodes between documents, which allows remote attackers to execute arbitrary code or cause a denial of service (JavaScript compartment mismatch, or assertion failure and application exit) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=851353 - http://l
nal Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=851353 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - http://www.securityfocus.com/bid/62473 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - http://www.ubuntu.com/usn/USN-1952-1 - http://www.ubuntu.com/usn/USN-1951-1 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef
ty-announce/2013-11/msg00005.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19022 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html - http://www.mozilla.org/security/announce/2013/mfsa2013-88.html - http://rhn.redhat.com/errata/RHSA-2013-1268.html - http://rhn.redhat.com/errata/RHSA-2013-1269.html - http://www.debian.org/security/2013/dsa-2762 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html
CVE ID: CVE-2013-1731 State: PUBLISHED Published: 2013-09-18T10:00:00 Last Updated: 2024-08-06T15:13:32.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the GL tracing functionality in Mozilla Firefox before 24.0 on Android allows attackers to execute arbitrary code via a Trojan horse .so file in a world-writable directory. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.h
-announce/2013-September/116610.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - http://www.mozilla.org/security/announce/2013/mfsa2013-87.html - https://bugzilla.mozilla.org/show_bug.cgi?id=899702
CVE ID: CVE-2013-1732 State: PUBLISHED Published: 2013-09-18T10:00:00 Last Updated: 2024-08-06T15:13:32.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the nsFloatManager::GetFlowArea function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code via crafted use of lists and floats within a multi-column layout. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - https://bugzilla.mozilla.org/show_bug.cgi?id=883514 - http://lists.fedora
e.org/opensuse-updates/2013-09/msg00055.html - https://bugzilla.mozilla.org/show_bug.cgi?id=883514 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - http://www.ubuntu.com/usn/USN-1952-1 - http://www.ubuntu.com/usn/USN-1951-1 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - http://www.securityfocus.com/bid/62469 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html - http://l
l - http://www.securityfocus.com/bid/62469 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18520 - http://rhn.redhat.com/errata/RHSA-2013-1268.html - http://rhn.redhat.com/errata/RHSA-2013-1269.html - http://www.mozilla.org/security/announce/2013/mfsa2013-89.html - http://www.debian.org/security/2013/dsa-2762 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html
CVE ID: CVE-2013-1733 State: PUBLISHED Published: 2013-10-24T10:00:00Z Last Updated: 2024-09-16T20:57:27.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in process_bug.cgi in Bugzilla 4.4.x before 4.4.1 allows remote attackers to hijack the authentication of arbitrary users for requests that modify bugs via vectors involving a midair-collision token. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=911593 - http://www.bugzilla.org/security/4.0.10/
CVE ID: CVE-2013-1734 State: PUBLISHED Published: 2013-10-24T10:00:00Z Last Updated: 2024-09-17T02:00:32.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.0.x before 4.0.11; 4.1.x and 4.2.x before 4.2.7; and 4.3.x and 4.4.x before 4.4.1 allows remote attackers to hijack the authentication of arbitrary users for requests that commit an attachment change via an update action. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=913904 - http://www.bugzilla.org/security/4.0.10/
CVE ID: CVE-2013-1735 State: PUBLISHED Published: 2013-09-18T10:00:00 Last Updated: 2024-08-06T15:13:32.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code via vectors related to image-document scrolling. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-Septemb
suse.org/opensuse-updates/2013-09/msg00055.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html - http://www.securityfocus.com/bid/62479 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - http://www.ubuntu.com/usn/USN-1952-1 - http://www.ubuntu.com/usn/USN-1951-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18443 - http://www.mozilla.org/security/announce/2013/mfsa2013-90.html - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html - http://lists.fedoraproject.org/pipermail/package-anno
ts.opensuse.org/opensuse-security-announce/2013-11/msg00005.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html - http://rhn.redhat.com/errata/RHSA-2013-1268.html - http://rhn.redhat.com/errata/RHSA-2013-1269.html - https://bugzilla.mozilla.org/show_bug.cgi?id=898871 - http://www.debian.org/security/2013/dsa-2762 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html
CVE ID: CVE-2013-1736 State: PUBLISHED Published: 2013-09-18T10:00:00 Last Updated: 2024-08-06T15:13:32.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to improperly establishing parent-child relationships of range-request nodes. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - http://www
es: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - http://www.securityfocus.com/bid/62478 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - http://www.ubuntu.com/usn/USN-1952-1 - http://www.ubuntu.com/usn/USN-1951-1 - http://www.mozilla.org/security/announce/2013/mfsa2013-90.html - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - h
nnounce/2013-11/msg00005.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html - https://bugzilla.mozilla.org/show_bug.cgi?id=906301 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18856 - http://rhn.redhat.com/errata/RHSA-2013-1268.html - http://rhn.redhat.com/errata/RHSA-2013-1269.html - http://www.debian.org/security/2013/dsa-2762 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html
CVE ID: CVE-2013-1737 State: PUBLISHED Published: 2013-09-18T10:00:00 Last Updated: 2024-08-06T15:13:32.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly identify the "this" object during use of user-defined getter methods on DOM proxies, which might allow remote attackers to bypass intended access restrictions via vectors involving an expando object. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - http://lists.fedoraproject.org/piper
r: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - http://www.ubuntu.com/usn/USN-1952-1 - http://www.ubuntu.com/usn/USN-1951-1 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18789 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - http://lists.opensuse.org/opensuse-upd
//lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html - http://www.securityfocus.com/bid/62475 - https://bugzilla.mozilla.org/show_bug.cgi?id=907727 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html - http://www.mozilla.org/security/announce/2013/mfsa2013-91.html - http://rhn.redhat.com/errata/RHSA-2013-1268.html - http://rhn.redhat.com/errata/RHSA-2013-1269.html - http://www.debian.org/security/2013/dsa-2762 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html
CVE ID: CVE-2013-1738 State: PUBLISHED Published: 2013-09-18T10:00:00 Last Updated: 2024-08-06T15:13:32.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the JS_GetGlobalForScopeChain function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code by leveraging incorrect garbage collection in situations involving default compartments and frame-chain restoration. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907
opensuse-updates/2013-09/msg00055.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18766 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - http://www.ubuntu.com/usn/USN-1952-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=887334 - http://www.ubuntu.com/usn/USN-1951-1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html - https://bugzilla.mozilla.org/show_bug.cgi?id=882897 - http://lists.opensuse.org/opensuse-updates/2013-09
msg00057.html - https://bugzilla.mozilla.org/show_bug.cgi?id=882897 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html - http://www.securityfocus.com/bid/62466 - http://www.mozilla.org/security/announce/2013/mfsa2013-92.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html
CVE ID: CVE-2013-1739 State: PUBLISHED Published: 2013-10-22T22:00:00 Last Updated: 2024-08-06T15:13:32.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - https://bugzilla.redhat.com/show_bug.cgi?id=1012656 - http://www.vmware.com/security/advisories/VMSA-201