Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-1702 State: PUBLISHED Published: 2013-08-07T01:00:00 Last Updated: 2024-08-06T15:13:32.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=844088 - https://bugzilla.mozilla.org/show_bug.cgi?id=855331 - https://bugzilla.mozilla.org/show_bug.cgi?id=879139 - https://bugzilla.mozilla.org/show_bug.c
g/show_bug.cgi?id=855331 - https://bugzilla.mozilla.org/show_bug.cgi?id=879139 - https://bugzilla.mozilla.org/show_bug.cgi?id=874974 - https://bugzilla.mozilla.org/show_bug.cgi?id=858060 - https://bugzilla.mozilla.org/show_bug.cgi?id=893684 - https://bugzilla.mozilla.org/show_bug.cgi?id=862185 - https://bugzilla.mozilla.org/show_bug.cgi?id=878703 - http://www.mozilla.org/security/announce/2013/mfsa2013-63.html - https://bugzilla.mozilla.org/show_bug.cgi?id=870200 - https://bugzilla.mozilla.org/show_bug.cgi?id=854157 - https://bugzilla.mozilla.org/show_bug.cgi?id=861530 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18876
CVE ID: CVE-2013-1703 State: REJECTED Published: 2020-07-10T14:29:59 Last Updated: 2020-07-10T14:29:59 Description: No description available.
CVE ID: CVE-2013-1704 State: PUBLISHED Published: 2013-08-07T01:00:00 Last Updated: 2024-08-06T15:13:31.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsINode::GetParentNode function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors involving a DOM modification at the time of a SetBody mutation event. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=883313 - http://www.mozilla.org/security/announce/2013/mfsa2013-64.html - https://oval.ci
la.mozilla.org/show_bug.cgi?id=883313 - http://www.mozilla.org/security/announce/2013/mfsa2013-64.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18945
CVE ID: CVE-2013-1705 State: PUBLISHED Published: 2013-08-07T01:00:00 Last Updated: 2024-08-06T15:13:32.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer underflow in the cryptojs_interpret_key_gen_type function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Certificate Request Message Format (CRMF) request. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18935 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html - http://l
nition/oval%3Aorg.mitre.oval%3Adef%3A18935 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html - http://www.mozilla.org/security/announce/2013/mfsa2013-65.html - https://bugzilla.mozilla.org/show_bug.cgi?id=882865
CVE ID: CVE-2013-1706 State: PUBLISHED Published: 2013-08-07T01:00:00 Last Updated: 2024-08-06T15:13:31.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in maintenanceservice.exe in the Mozilla Maintenance Service in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8 allows local users to gain privileges via a long pathname on the command line. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18930 - http://www.mozilla.org/security/announce/2013/mfsa2013-66.html - https://b
inition/oval%3Aorg.mitre.oval%3Adef%3A18930 - http://www.mozilla.org/security/announce/2013/mfsa2013-66.html - https://bugzilla.mozilla.org/show_bug.cgi?id=888361
CVE ID: CVE-2013-1707 State: PUBLISHED Published: 2013-08-07T01:00:00 Last Updated: 2024-08-06T15:13:32.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8 allows local users to gain privileges via a long pathname on the command line to the Mozilla Maintenance Service. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18871 - https://bugzilla.mozilla.org/show_bug.cgi?id=888314 - http://www.mozilla.org/secu
/oval%3Aorg.mitre.oval%3Adef%3A18871 - https://bugzilla.mozilla.org/show_bug.cgi?id=888314 - http://www.mozilla.org/security/announce/2013/mfsa2013-66.html
CVE ID: CVE-2013-1708 State: PUBLISHED Published: 2013-08-07T01:00:00 Last Updated: 2024-08-06T15:13:31.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (application crash) via a crafted WAV file that is not properly handled by the nsCString::CharAt function. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=879924 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18803 - http://www.mozilla.org/security/announce/2013/mfsa2013-67.html
CVE ID: CVE-2013-1709 State: PUBLISHED Published: 2013-08-07T01:00:00 Last Updated: 2024-08-06T15:13:31.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly handle the interaction between FRAME elements and history, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving spoofing a relative location in a previously visited document. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2746 - http://www.debian.org/security/201
- CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2746 - http://www.debian.org/security/2013/dsa-2735 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18531 - http://www.securityfocus.com/bid/61867 - https://bugzilla.mozilla.org/show_bug.cgi?id=848253 - http://www.mozilla.org/security/announce/2013/mfsa2013-68.html
CVE ID: CVE-2013-1710 State: PUBLISHED Published: 2013-08-07T01:00:00 Last Updated: 2024-08-06T15:13:31.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to execute arbitrary JavaScript code or conduct cross-site scripting (XSS) attacks via vectors related to Certificate Request Message Format (CRMF) request generation. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2013/mfsa2013-69.html - http://www.debian
CVE Program Container: References: - http://www.mozilla.org/security/announce/2013/mfsa2013-69.html - http://www.debian.org/security/2013/dsa-2746 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18773 - http://www.securityfocus.com/bid/61900 - http://www.debian.org/security/2013/dsa-2735 - https://bugzilla.mozilla.org/show_bug.cgi?id=871368
CVE ID: CVE-2013-1711 State: PUBLISHED Published: 2013-08-07T01:00:00 Last Updated: 2024-08-06T15:13:32.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XrayWrapper implementation in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 does not properly address the possibility of an XBL scope bypass resulting from non-native arguments in XBL function calls, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks by leveraging access to an unprivileged object. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18830 - https://bugzilla.mozill
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18830 - https://bugzilla.mozilla.org/show_bug.cgi?id=843829 - http://www.mozilla.org/security/announce/2013/mfsa2013-70.html
CVE ID: CVE-2013-1712 State: PUBLISHED Published: 2013-08-07T01:00:00 Last Updated: 2024-08-06T15:13:32.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8 on Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012 allow local users to gain privileges via a Trojan horse DLL in (1) the update directory or (2) the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/
ditional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18014 - http://www.mozilla.org/security/announce/2013/mfsa2013-71.html - https://bugzilla.mozilla.org/show_bug.cgi?id=859072
CVE ID: CVE-2013-1713 State: PUBLISHED Published: 2013-08-07T01:00:00 Last Updated: 2024-08-06T15:13:32.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks or install arbitrary add-ons via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2746 - http://www.mozilla.org/security/announce/20
gram Container: References: - http://www.debian.org/security/2013/dsa-2746 - http://www.mozilla.org/security/announce/2013/mfsa2013-72.html - http://www.debian.org/security/2013/dsa-2735 - https://bugzilla.mozilla.org/show_bug.cgi?id=887098 - http://www.securityfocus.com/bid/61876 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18884
CVE ID: CVE-2013-1714 State: PUBLISHED Published: 2013-08-07T01:00:00 Last Updated: 2024-08-06T15:13:32.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Workers implementation in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 does not properly restrict XMLHttpRequest calls, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2746 - https://bugzilla.mozilla.org/show_bug.cgi?id=879787
ainer: References: - http://www.debian.org/security/2013/dsa-2746 - https://bugzilla.mozilla.org/show_bug.cgi?id=879787 - http://www.securityfocus.com/bid/61882 - http://www.debian.org/security/2013/dsa-2735 - http://www.mozilla.org/security/announce/2013/mfsa2013-73.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18002
CVE ID: CVE-2013-1715 State: PUBLISHED Published: 2013-08-07T01:00:00 Last Updated: 2024-08-06T15:13:32.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in the (1) full installer and (2) stub installer in Mozilla Firefox before 23.0 on Windows allow local users to gain privileges via a Trojan horse DLL in the default downloads directory. NOTE: this issue exists because of an incomplete fix for CVE-2012-4206. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18210 - http://www.mozilla.org/security/announce/2013/mfsa2013-74.html - h
arch/definition/oval%3Aorg.mitre.oval%3Adef%3A18210 - http://www.mozilla.org/security/announce/2013/mfsa2013-74.html - https://bugzilla.mozilla.org/show_bug.cgi?id=883165
CVE ID: CVE-2013-1717 State: PUBLISHED Published: 2013-08-07T01:00:00 Last Updated: 2024-08-06T15:13:31.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly restrict local-filesystem access by Java applets, which allows user-assisted remote attackers to read arbitrary files by leveraging a download to a fixed pathname or other predictable pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2746 - http://www.securityfocus.com/bid/61896 - https://oval.cisecu
eferences: - http://www.debian.org/security/2013/dsa-2746 - http://www.securityfocus.com/bid/61896 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18367 - http://www.mozilla.org/security/announce/2013/mfsa2013-75.html - http://www.debian.org/security/2013/dsa-2735 - https://bugzilla.mozilla.org/show_bug.cgi?id=406541
CVE ID: CVE-2013-1718 State: PUBLISHED Published: 2013-09-18T10:00:00 Last Updated: 2024-08-06T15:13:32.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - https://bugzilla.mozilla.org/show_bug.cg
eferences: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - https://bugzilla.mozilla.org/show_bug.cgi?id=889193 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - http://www.ubuntu.com/usn/USN-1952-1 - http://www.ubuntu.com/usn/USN-1951-1 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html - http://www.mozilla.org/security/announce/2013/mfsa2013-76.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - http://lists.opens
2013-76.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html - https://bugzilla.mozilla.org/show_bug.cgi?id=897676 - http://www.securityfocus.com/bid/62463 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18939 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html - https://bugzilla.mozilla.org/show_bug.cgi?id=901351 - http://rhn.redhat.com/errata/RHSA-2013-1268.html - http://rhn.redhat.com/errata/RHSA-2013-1269.html - http://www.debian.org/security/2013/dsa-2762 - https://bugzilla.mozilla.org/show_bug.cgi?id=899022 - http://lists.open
- http://www.debian.org/security/2013/dsa-2762 - https://bugzilla.mozilla.org/show_bug.cgi?id=899022 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html
CVE ID: CVE-2013-1719 State: PUBLISHED Published: 2013-09-18T10:00:00 Last Updated: 2024-08-06T15:13:32.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - https://bugzilla.mozilla.org/show_bug.cgi?id=854897 - https://oval.cisecurity.org/repository/search/definiti
0055.html - https://bugzilla.mozilla.org/show_bug.cgi?id=854897 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19011 - https://bugzilla.mozilla.org/show_bug.cgi?id=863935 - https://bugzilla.mozilla.org/show_bug.cgi?id=876878 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - https://bugzilla.mozilla.org/show_bug.cgi?id=847606 - https://bugzilla.mozilla.org/show_bug.cgi?id=909494 - http://www.ubuntu.com/usn/USN-1951-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=898832 - http://www.mozilla.org/security/announce/2013/mfsa2013-7
-1951-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=898832 - http://www.mozilla.org/security/announce/2013/mfsa2013-76.html - http://www.securityfocus.com/bid/62462 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - https://bugzilla.mozilla.org/show_bug.cgi?id=893519 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html - https://bugzilla.mozilla.org/show_bug.cgi?id=873073 - https://bugzilla.mozilla.org/show_bug.cgi?id=895294 - https://bugzilla.mozilla.org/show_bug.cgi?id=883450 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html - https://bugzilla.mozilla.org/show_bug.cgi?id=750932 - https://bugzilla.mozilla.org/show_bug.c
es/2013-09/msg00061.html - https://bugzilla.mozilla.org/show_bug.cgi?id=750932 - https://bugzilla.mozilla.org/show_bug.cgi?id=898381 - https://bugzilla.mozilla.org/show_bug.cgi?id=871462 - https://bugzilla.mozilla.org/show_bug.cgi?id=851982 - https://bugzilla.mozilla.org/show_bug.cgi?id=896126 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html
CVE ID: CVE-2013-1720 State: PUBLISHED Published: 2013-09-18T10:00:00 Last Updated: 2024-08-06T15:13:32.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsHtml5TreeBuilder::resetTheInsertionMode function in the HTML5 Tree Builder in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 does not properly maintain the state of the insertion-mode stack for template elements, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer over-read) by triggering use of this stack in its empty state. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-
state. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - http://www.ubuntu.com/usn/USN-1952-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18617 - http://www.ubuntu.com/usn/USN-1951-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=888820 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html - http:/
/package-announce/2013-September/117526.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html - http://www.mozilla.org/security/announce/2013/mfsa2013-77.html - http://www.securityfocus.com/bid/62465 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html
CVE ID: CVE-2013-1721 State: PUBLISHED Published: 2013-09-18T10:00:00 Last Updated: 2024-08-06T15:13:31.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the drawLineLoop function in the libGLESv2 library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox before 24.0 and SeaMonkey before 2.21, allows remote attackers to execute arbitrary code via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - http://lists.fedoraproject.org/pipermail/package-annou
oject.org/pipermail/package-announce/2013-September/115907.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - http://www.ubuntu.com/usn/USN-1952-1 - http://www.ubuntu.com/usn/USN-1951-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=890277 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18993 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - http://www.mozilla.org/security/announce/2013/mfsa2013-78.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html
CVE ID: CVE-2013-1722 State: PUBLISHED Published: 2013-09-18T10:00:00 Last Updated: 2024-08-06T15:13:32.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsAnimationManager::BuildAnimations function in the Animation Manager in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving stylesheet cloning. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html
l Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html - http://www.ubuntu.com/usn/USN-1952-1 - http://www.ubuntu.com/usn/USN-1951-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=893308 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - http://www.mozilla.org/security/announce
lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html - http://www.mozilla.org/security/announce/2013/mfsa2013-79.html - http://www.securityfocus.com/bid/62460 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19031 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html - http://rhn.redhat.com/errata/RHSA-2013-1268.html - http://rhn.redhat.com/errata/RHSA-2013-1269.html - http://www.debian.org/security/2013/dsa-2762 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html