Mozilla Firefox/Thunderbird/SeaMonkey CVE-2013-5609 Multiple Memory Corruption Vulnerabilities
BID:64204
Info
Mozilla Firefox/Thunderbird/SeaMonkey CVE-2013-5609 Multiple Memory Corruption Vulnerabilities
| Bugtraq ID: | 64204 |
| Class: | Unknown |
| CVE: |
CVE-2013-5609 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 10 2013 12:00AM |
| Updated: | Apr 13 2015 09:50PM |
| Credit: | Ben Turner, Bobby Holley, Jesse Ruderman, and Christian Holler |
| Vulnerable: |
Ubuntu Ubuntu Linux 13.10 Ubuntu Ubuntu Linux 13.04 Ubuntu Ubuntu Linux 12.10 Ubuntu Ubuntu Linux 12.04 LTS SuSE SUSE Linux Enterprise Software Development Kit 11 SP3 SuSE SUSE Linux Enterprise Server 11 SP3 for VMware SuSE SUSE Linux Enterprise Server 11 SP3 SuSE Suse Linux Enterprise Desktop 11 SP3 Slackware Slackware Linux 14.1 Slackware Slackware Linux 14.0 S.u.S.E. openSUSE 13.1 S.u.S.E. openSUSE 12.3 S.u.S.E. openSUSE 12.2 S.u.S.E. openSUSE 11.4 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux Optional Productivity Application 5 server Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Palemoon Pale Moon 24.2.1 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Mozilla Thunderbird 17.0.7 Mozilla Thunderbird 17.0.6 Mozilla Thunderbird 17.0.5 Mozilla Thunderbird 17.0.4 Mozilla Thunderbird 17.0.3 Mozilla Thunderbird 17.0.2 Mozilla Thunderbird 16.0.2 Mozilla Thunderbird 24.1 Mozilla Thunderbird 24.0 Mozilla Thunderbird 17.0.8 Mozilla Thunderbird 17.0 Mozilla Thunderbird 16.0.1 Mozilla Thunderbird 16 Mozilla Thunderbird 15 Mozilla Thunderbird 14.0 Mozilla Thunderbird 14 Mozilla Thunderbird 13.0 Mozilla Thunderbird 12.0 Mozilla Thunderbird 11.0 Mozilla Thunderbird 10.0.2 Mozilla Thunderbird 10.0.1 Mozilla Thunderbird 10.0 Mozilla SeaMonkey 2.22.1 Mozilla SeaMonkey 2.16.1 Mozilla SeaMonkey 2.13.2 Mozilla SeaMonkey 2.0.11 Mozilla SeaMonkey 2.0.9 Mozilla SeaMonkey 2.0.8 Mozilla SeaMonkey 2.0.5 Mozilla SeaMonkey 2.0.4 Mozilla SeaMonkey 2.0.3 Mozilla SeaMonkey 2.0.2 Mozilla SeaMonkey 2.0.1 Mozilla SeaMonkey 1.1.19 Mozilla SeaMonkey 1.1.18 Mozilla SeaMonkey 1.1.17 Mozilla SeaMonkey 1.1.16 Mozilla SeaMonkey 1.1.15 Mozilla SeaMonkey 1.1.14 Mozilla SeaMonkey 1.1.13 Mozilla SeaMonkey 1.1.12 Mozilla SeaMonkey 1.1.11 Mozilla SeaMonkey 1.1.10 Mozilla SeaMonkey 1.1.9 Mozilla SeaMonkey 1.1.8 Mozilla SeaMonkey 1.1.7 Mozilla SeaMonkey 1.1.6 Mozilla SeaMonkey 1.1.5 Mozilla SeaMonkey 1.1.4 Mozilla SeaMonkey 1.1.3 Mozilla SeaMonkey 1.1.2 Mozilla SeaMonkey 1.1.1 Mozilla SeaMonkey 1.0.99 Mozilla SeaMonkey 1.0.9 Mozilla SeaMonkey 1.0.8 Mozilla SeaMonkey 1.0.7 Mozilla SeaMonkey 1.0.6 Mozilla SeaMonkey 1.0.5 Mozilla SeaMonkey 1.0.3 Mozilla SeaMonkey 1.0.2 Mozilla SeaMonkey 1.0.1 Mozilla SeaMonkey 2.22 Mozilla SeaMonkey 2.21 Mozilla SeaMonkey 2.20 Mozilla SeaMonkey 2.2 Mozilla SeaMonkey 2.1b2 Mozilla SeaMonkey 2.17 Mozilla SeaMonkey 2.16 Mozilla SeaMonkey 2.15 Mozilla SeaMonkey 2.14 Mozilla SeaMonkey 2.13.1 Mozilla SeaMonkey 2.13 Mozilla SeaMonkey 2.12 Mozilla SeaMonkey 2.11 Mozilla SeaMonkey 2.10 Mozilla SeaMonkey 2.1 Alpha3 Mozilla SeaMonkey 2.1 Alpha2 Mozilla SeaMonkey 2.1 Alpha1 Mozilla SeaMonkey 2.1 Mozilla SeaMonkey 2.0.7 Mozilla SeaMonkey 2.0.6 Mozilla SeaMonkey 2.0.14 Mozilla SeaMonkey 2.0.13 Mozilla SeaMonkey 2.0.12 Mozilla SeaMonkey 2.0.10 Mozilla SeaMonkey 2.0 Rc2 Mozilla SeaMonkey 2.0 Rc1 Mozilla SeaMonkey 2.0 Beta 2 Mozilla SeaMonkey 2.0 Beta 1 Mozilla SeaMonkey 2.0 Alpha 3 Mozilla SeaMonkey 2.0 Alpha 2 Mozilla SeaMonkey 2.0 Alpha 1 Mozilla SeaMonkey 2.0 Mozilla SeaMonkey 1.5.0.9 Mozilla SeaMonkey 1.5.0.8 Mozilla SeaMonkey 1.5.0.10 Mozilla SeaMonkey 1.1 beta Mozilla SeaMonkey 1.0 dev Mozilla SeaMonkey 1.0 Mozilla Firefox ESR 17.0.10 Mozilla Firefox ESR 17.0.9 Mozilla Firefox ESR 17.0.7 Mozilla Firefox ESR 17.0.6 Mozilla Firefox ESR 17.0.4 Mozilla Firefox ESR 17.0.3 Mozilla Firefox ESR 17.0.2 Mozilla Firefox ESR 17.0.1 Mozilla Firefox ESR 10.0.12 Mozilla Firefox ESR 10.0.10 Mozilla Firefox ESR 10.0.8 Mozilla Firefox ESR 10.0.7 Mozilla Firefox ESR 10.0.5 Mozilla Firefox ESR 10.0.4 Mozilla Firefox ESR 10.0.3 Mozilla Firefox ESR 24.1.1 Mozilla Firefox ESR 24.1 Mozilla Firefox ESR 17.0.8 Mozilla Firefox ESR 17.0.11 Mozilla Firefox ESR 10.0.9 Mozilla Firefox ESR 10.0.6 Mozilla Firefox ESR 10.0.2 Mozilla Firefox ESR 10.0.11 Mozilla Firefox 25.0.1 Mozilla Firefox 19.0.2 Mozilla Firefox 16.0.2 Mozilla Firefox 16.0.1 Mozilla Firefox 15.0.1 Mozilla Firefox 27 Mozilla Firefox 25.0 Mozilla Firefox 24.0 Mozilla Firefox 23.0 Mozilla Firefox 22.0 Mozilla Firefox 21.0 Mozilla Firefox 20.0.1 Mozilla Firefox 20.0 Mozilla Firefox 19.0 Mozilla Firefox 18.0 Mozilla Firefox 17.0.1 Mozilla Firefox 17.0 Mozilla Firefox 16 Mozilla Firefox 15 Mozilla Firefox 14.01 Mozilla Firefox 14.0 Mozilla Firefox 14 Mozilla Firefox 13.0 Mozilla Firefox 12.0 Mozilla Firefox 11.0 Mozilla Firefox 10.0.2 Mozilla Firefox 10.0.1 Mozilla Firefox 10.0 Mozilla Firefox 10 IBM Storwize V7000 Unified Software 1.4 0 IBM Storwize V7000 Unified Software 1.3.2 0 IBM Storwize V7000 Unified Software 1.4.2.1 IBM Storwize V7000 Unified Software 1.4.2.0 IBM Storwize V7000 Unified Software 1.4.1.1 IBM Storwize V7000 Unified Software 1.4.1.0 IBM Storwize V7000 Unified Software 1.4.0.4 IBM Storwize V7000 Unified Software 1.3.2.3 CentOS CentOS 5 Avaya one-X Client Enablement Services 6.2 Avaya one-X Client Enablement Services 6.1 SP2 Avaya one-X Client Enablement Services 6.1 Avant Force Avant Browser 2013 build 119 Avant Force Avant Browser 2013 build 118 Avant Force Avant Browser 2013 build 117 Avant Browser Avant Browser 2013 build 115 |
| Not Vulnerable: |
Palemoon Pale Moon 24.2.2 Mozilla Thunderbird 24.2 Mozilla SeaMonkey 2.23 Mozilla Firefox ESR 24.2 Mozilla Firefox 26 Avant Force Avant Browser 2013 build 120 |
Discussion
Mozilla Firefox/Thunderbird/SeaMonkey CVE-2013-5609 Multiple Memory Corruption Vulnerabilities
Mozilla Firefox, Thunderbird, and SeaMonkey are prone to multiple unspecified memory-corruption vulnerabilities.
Successful exploits may allow an attacker to execute arbitrary code in the context of the user running the affected application or result in denial-of-service conditions.
These issues are fixed in the following versions:
Firefox 26
Firefox ESR 24.2
Thunderbird 24.2
Seamonkey 2.23
Mozilla Firefox, Thunderbird, and SeaMonkey are prone to multiple unspecified memory-corruption vulnerabilities.
Successful exploits may allow an attacker to execute arbitrary code in the context of the user running the affected application or result in denial-of-service conditions.
These issues are fixed in the following versions:
Firefox 26
Firefox ESR 24.2
Thunderbird 24.2
Seamonkey 2.23
Exploit / POC
Mozilla Firefox/Thunderbird/SeaMonkey CVE-2013-5609 Multiple Memory Corruption Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Mozilla Firefox/Thunderbird/SeaMonkey CVE-2013-5609 Multiple Memory Corruption Vulnerabilities
References:
References:
- Avant Browser 2013 build 115, Released 9.12.2013 (Avant)
- Cisco NX-OS Download Page (Cisco)
- Hooray! Your Cyberfox is up to date. 26.0.0 (8pecxstudios)
- Pale Moon: Release notes for version 9 (Moonchild Productions)
- SeaMonkey Homepage (Mozilla)
- Security Bulletin: Mozilla firefox vulnerability issues on IBM Storwize V7000 Un (IBM)
- [slackware-security] mozilla-firefox (SSA:2013-350-04) (Slackware)
- [slackware-security] mozilla-thunderbird (SSA:2013-350-05) (Slackware)
- [slackware-security] seamonkey (SSA:2013-350-07) (Slackware)
- Avaya firefox security update (RHSA-2013-1812) (Avaya)
- Cisco NX-OS Software TACACS+ Command Authorization Vulnerability (Cisco)
- Mozilla Foundation Security Advisory 2013-104 (Mozilla)
- USN-2053-1: Thunderbird vulnerabilities (Ubuntu)