CVE-2013-1694
26.06.2013, 03:19
The PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly handle the lack of a wrapper, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by leveraging unintended clearing of the wrapper cache's preserved-wrapper flag.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mozilla | firefox | 𝑥 ≤ 21.0 |
| mozilla | firefox | 19.0 |
| mozilla | firefox | 19.0.1 |
| mozilla | firefox | 19.0.2 |
| mozilla | firefox | 20.0 |
| mozilla | firefox | 20.0.1 |
| mozilla | firefox | 17.0 |
| mozilla | firefox | 17.0.1 |
| mozilla | firefox | 17.0.2 |
| mozilla | firefox | 17.0.3 |
| mozilla | firefox | 17.0.4 |
| mozilla | firefox | 17.0.5 |
| mozilla | firefox | 17.0.6 |
| mozilla | thunderbird | 𝑥 ≤ 17.0.6 |
| mozilla | thunderbird | 17.0 |
| mozilla | thunderbird | 17.0.1 |
| mozilla | thunderbird | 17.0.2 |
| mozilla | thunderbird | 17.0.3 |
| mozilla | thunderbird | 17.0.4 |
| mozilla | thunderbird | 17.0.5 |
| mozilla | thunderbird_esr | 17.0 |
| mozilla | thunderbird_esr | 17.0.1 |
| mozilla | thunderbird_esr | 17.0.2 |
| mozilla | thunderbird_esr | 17.0.3 |
| mozilla | thunderbird_esr | 17.0.4 |
| mozilla | thunderbird_esr | 17.0.5 |
| mozilla | thunderbird_esr | 17.0.6 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| firefox |
| ||||||||
| seamonkey |
| ||||||||
| thunderbird |
| ||||||||
| xulrunner-1.9.2 |
|
Common Weakness Enumeration
References