CVSS: 8.8EPSS: 1%CPEs: 15EXPL: 0CVE-2013-5619 – Ubuntu Security Notice USN-2052-1
https://notcve.org/view.php?id=CVE-2013-5619
11 Dec 2013 — Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JavaScript code. Múltiples desbordamientos de enteros en la implementación binary-search de SpiderMonkey de Mozilla Firefox anterior a la versión 26.0 y SeaMonkey anterior a 2.23 podría permite a atacantes remotos provocar una denegaci... • http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html • CWE-190: Integer Overflow or Wraparound •
CVSS: 6.5EPSS: 0%CPEs: 228EXPL: 0CVE-2013-5611 – Ubuntu Security Notice USN-2052-1
https://notcve.org/view.php?id=CVE-2013-5611
11 Dec 2013 — Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation. Mozilla Firefox anterior a la versión 26.0 no elimina adecuadamente el doorhanger de la aplicación de instalación, lo que hace más sencillo para atancates remotos falsificar un sitio de instalación Web App mediante el control del tiempo de navegación por páginas. Ben Turner, Bobby Holley, Je... • http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html •
CVSS: 10.0EPSS: 0%CPEs: 17EXPL: 0CVE-2013-5610 – Ubuntu Security Notice USN-2052-1
https://notcve.org/view.php?id=CVE-2013-5610
11 Dec 2013 — Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Múltiples vulnerabilidades no especificadas en el motor del navegador Mozilla Firefox anterior a 26.0 y SeaMonkey anterior a 2.23 que permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o ... • http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html • CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 17EXPL: 0CVE-2013-6672 – Ubuntu Security Notice USN-2052-1
https://notcve.org/view.php?id=CVE-2013-6672
11 Dec 2013 — Mozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote attackers to read clipboard data by leveraging certain middle-click paste operations. Mozilla Firefox anterior a la versión 26.0 y SeaMonkey anterior a la versión 2.23 en Linux permite a atacantes remotos asistidos por el usuario leer datos del portapapeles mediante el aprovechamiento de ciertas operaciones de pegado con el botón central del ratón. Ben Turner, Bobby Holley, Jesse Ruderman, Christian Holler and Christop... • http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.8EPSS: 0%CPEs: 18EXPL: 1CVE-2013-5615 – Ubuntu Security Notice USN-2053-1
https://notcve.org/view.php?id=CVE-2013-5615
11 Dec 2013 — The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not properly enforce certain typeset restrictions on the generation of GetElementIC typed array stubs, which has unspecified impact and remote attack vectors. La implementación de JavaScript en Mozilla Firefox anterior a 26.0, Firefox ESR 24.x anterior a 24.2, Thunderbird anterior a 24.2, y SeaMonkey anterior a 2.23 no hace cumplir adecuadamente ciertas restricc... • http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html •
CVSS: 5.9EPSS: 0%CPEs: 18EXPL: 1CVE-2013-6673 – Ubuntu Security Notice USN-2053-1
https://notcve.org/view.php?id=CVE-2013-6673
11 Dec 2013 — Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle attackers to spoof SSL servers in opportunistic circumstances via a valid certificate that is unacceptable to the user. Mozilla Firefox anterior a 26.0, Firefox ESR 24.x anterior a 24.2, Thunderbird anterior a 24.2, y SeaMonkey anterior a 2.23 no reconoce la eliminación de un certific... • http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html • CWE-310: Cryptographic Issues •
CVSS: 6.1EPSS: 1%CPEs: 26EXPL: 0CVE-2013-5612 – Mozilla: Character encoding cross-origin XSS attack (MFSA 2013-106)
https://notcve.org/view.php?id=CVE-2013-5612
11 Dec 2013 — Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by leveraging a Same Origin Policy violation triggered by lack of a charset parameter in a Content-Type HTTP header. Vulnerabilidad de XSS en Mozilla Firefox anterior a la versión 26.0 y SeaMonkey anterior a la versión 2.23 hace más sencillo para atacantes remotos inyectar script web o HTML arbitrario mediante el aprovechamiento de una ... • http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 10.0EPSS: 1%CPEs: 28EXPL: 1CVE-2013-5618 – Mozilla: Use-after-free during Table Editing (MFSA 2013-109)
https://notcve.org/view.php?id=CVE-2013-5618
11 Dec 2013 — Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code by triggering improper garbage collection. Vulnerabilidad de uso despues de liberación en la función nsNodeUtils::LastRelease en la interfaz de usuario en el editor de componentes en Mozilla Firefox anterior a 26.0, Fir... • http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html • CWE-416: Use After Free •
CVSS: 9.8EPSS: 0%CPEs: 28EXPL: 1CVE-2013-5616 – Mozilla: Use-after-free in event listeners (MFSA 2013-108)
https://notcve.org/view.php?id=CVE-2013-5616
11 Dec 2013 — Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to mListeners event listeners. Vulnerabilidad de liberación despues de uso en la función nsEventListenerManager :: HandleEventSubType en Mozilla Firefox anterior a 26.0, Firefox ESR 24.x ... • http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html • CWE-416: Use After Free •
CVSS: 10.0EPSS: 3%CPEs: 28EXPL: 1CVE-2013-6671 – Mozilla: Segmentation violation when replacing ordered list elements (MFSA 2013-111)
https://notcve.org/view.php?id=CVE-2013-6671
11 Dec 2013 — The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code via crafted use of JavaScript code for ordered list elements. L función nsGfxScrollFrameInner::IsLTR en Mozilla Firefox anterior a 26.0, Firefox ESR 24.x anteriores a 24.2, Thunderbird anteriores a 24.2, y SeaMonkey anteriores a 2.23 permite a atacantes remotos ejecutar código de forma arbitraria a través ... • http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html • CWE-94: Improper Control of Generation of Code ('Code Injection') •