Mozilla Firefox and SeaMonkey CVE-2013-6672 Information Disclosure Vulnerability

Bugtraq ID:	64210
Class:	Design Error
CVE:	CVE-2013-6672
Remote:	Yes
Local:	No
Published:	Dec 10 2013 12:00AM
Updated:	Apr 13 2015 10:14PM
Credit:	Vincent Lefevre
Vulnerable:	Ubuntu Ubuntu Linux 13.10 Ubuntu Ubuntu Linux 13.04 Ubuntu Ubuntu Linux 12.10 Ubuntu Ubuntu Linux 12.04 LTS SuSE SUSE Linux Enterprise Software Development Kit 11 SP3 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 11 SP3 for VMware + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 11 SP3 SuSE Suse Linux Enterprise Desktop 11 SP3 Slackware Slackware Linux 14.1 Slackware Slackware Linux 14.0 S.u.S.E. openSUSE 13.1 S.u.S.E. openSUSE 12.3 S.u.S.E. openSUSE 12.2 S.u.S.E. openSUSE 11.4 Mozilla SeaMonkey 2.22.1 Mozilla SeaMonkey 2.16.1 Mozilla SeaMonkey 2.13.2 Mozilla SeaMonkey 2.0.11 Mozilla SeaMonkey 2.0.9 Mozilla SeaMonkey 2.0.8 Mozilla SeaMonkey 2.0.5 Mozilla SeaMonkey 2.0.4 Mozilla SeaMonkey 2.0.3 Mozilla SeaMonkey 2.0.2 Mozilla SeaMonkey 2.0.1 Mozilla SeaMonkey 1.1.19 Mozilla SeaMonkey 1.1.18 Mozilla SeaMonkey 1.1.17 Mozilla SeaMonkey 1.1.16 Mozilla SeaMonkey 1.1.15 Mozilla SeaMonkey 1.1.14 Mozilla SeaMonkey 1.1.13 Mozilla SeaMonkey 1.1.12 Mozilla SeaMonkey 1.1.11 Mozilla SeaMonkey 1.1.10 Mozilla SeaMonkey 1.1.9 Mozilla SeaMonkey 1.1.8 Mozilla SeaMonkey 1.1.7 Mozilla SeaMonkey 1.1.6 Mozilla SeaMonkey 1.1.5 Mozilla SeaMonkey 1.1.4 Mozilla SeaMonkey 1.1.3 Mozilla SeaMonkey 1.1.2 Mozilla SeaMonkey 1.1.1 Mozilla SeaMonkey 1.0.99 Mozilla SeaMonkey 1.0.9 Mozilla SeaMonkey 1.0.8 Mozilla SeaMonkey 1.0.7 Mozilla SeaMonkey 1.0.6 Mozilla SeaMonkey 1.0.5 Mozilla SeaMonkey 1.0.3 Mozilla SeaMonkey 1.0.2 Mozilla SeaMonkey 1.0.1 Mozilla SeaMonkey 2.22 Mozilla SeaMonkey 2.21 Mozilla SeaMonkey 2.20 Mozilla SeaMonkey 2.2 Mozilla SeaMonkey 2.1b2 Mozilla SeaMonkey 2.17 Mozilla SeaMonkey 2.16 Mozilla SeaMonkey 2.15 Mozilla SeaMonkey 2.14 Mozilla SeaMonkey 2.13.1 Mozilla SeaMonkey 2.13 Mozilla SeaMonkey 2.12 Mozilla SeaMonkey 2.11 Mozilla SeaMonkey 2.10 Mozilla SeaMonkey 2.1 Mozilla SeaMonkey 2.0.7 Mozilla SeaMonkey 2.0.6 Mozilla SeaMonkey 2.0.14 Mozilla SeaMonkey 2.0.13 Mozilla SeaMonkey 2.0.12 Mozilla SeaMonkey 2.0.10 Mozilla SeaMonkey 2.0 Mozilla SeaMonkey 1.5.0.9 Mozilla SeaMonkey 1.5.0.8 Mozilla SeaMonkey 1.5.0.10 Mozilla SeaMonkey 1.0 Mozilla Firefox 25.0.1 Mozilla Firefox 19.0.2 Mozilla Firefox 16.0.2 Mozilla Firefox 16.0.1 Mozilla Firefox 15.0.1 Mozilla Firefox 25.0 Mozilla Firefox 24.0 Mozilla Firefox 23.0 Mozilla Firefox 22.0 Mozilla Firefox 21.0 Mozilla Firefox 20.0.1 Mozilla Firefox 20.0 Mozilla Firefox 19.0 Mozilla Firefox 18.0 Mozilla Firefox 17.0.1 Mozilla Firefox 17.0 Mozilla Firefox 16 Mozilla Firefox 15 Mozilla Firefox 14.01 Mozilla Firefox 14.0 Mozilla Firefox 14 Mozilla Firefox 13.0 Mozilla Firefox 12.0 Mozilla Firefox 11.0 Mozilla Firefox 10.0.2 Mozilla Firefox 10.0.1 Mozilla Firefox 10.0 Avant Force Avant Browser 2013 build 119 Avant Force Avant Browser 2013 build 118 Avant Force Avant Browser 2013 build 117 Avant Browser Avant Browser 2013 build 115
Not Vulnerable:	Mozilla SeaMonkey 2.23 Mozilla Firefox 26 Avant Force Avant Browser 2013 build 120

Mozilla Firefox and SeaMonkey CVE-2013-6672 Information Disclosure Vulnerability

Mozilla Firefox and SeaMonkey are prone to an information-disclosure vulnerability.

Attackers can exploit this issue to disclose sensitive information that may aid in further attacks.

This issue is fixed in:

Firefox 26
SeaMonkey 2.23

Mozilla Firefox and SeaMonkey CVE-2013-6672 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Mozilla Firefox and SeaMonkey CVE-2013-6672 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.