CVE-2013-5607
- EPSS 1.59%
- Veröffentlicht 20.11.2013 14:12:50
- Zuletzt bearbeitet 11.04.2025 00:51:21
Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11 and 24.x before 24.1.1, and SeaMonkey before 2.22.1, allows remote attacker...
- EPSS 0.21%
- Veröffentlicht 19.11.2013 04:50:56
- Zuletzt bearbeitet 11.04.2025 00:51:21
The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of s...
- EPSS 2.06%
- Veröffentlicht 30.10.2013 10:55:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allow remote atta...
- EPSS 3.28%
- Veröffentlicht 30.10.2013 10:55:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
Unspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 allows remote attackers to cause a denial of service (memory corruption and application c...
CVE-2013-5593
- EPSS 0.48%
- Veröffentlicht 30.10.2013 10:55:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly restrict the nature or placement of HTML within a dropdown menu, which allows remote ...
CVE-2013-5595
- EPSS 1.93%
- Veröffentlicht 30.10.2013 10:55:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly allocate memory for unspecified func...
CVE-2013-5596
- EPSS 1.78%
- Veröffentlicht 30.10.2013 10:55:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly determine the thread for release of an image object, which allows remote attac...
- EPSS 3.63%
- Veröffentlicht 30.10.2013 10:55:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22...
- EPSS 2.86%
- Veröffentlicht 30.10.2013 10:55:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka presentation shell) implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderb...
- EPSS 2.69%
- Veröffentlicht 30.10.2013 10:55:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
Use-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonke...