Mozilla Firefox has been updated to the 17.0.7 ESR version, fixing bugs and security fixes.

  - Mozilla developers identified and fixed several memory     safety bugs in the browser engine used in Firefox and     other Mozilla-based products. Some of these bugs showed     evidence of memory corruption under certain     circumstances, and we presume that with enough effort at     least some of these could be exploited to run arbitrary     code. (MFSA 2013-49)

    Gary Kwong, Jesse Ruderman, and Andrew McCreight     reported memory safety problems and crashes that affect     Firefox ESR 17, and Firefox 21. (CVE-2013-1682)

  - Security researcher Abhishek Arya (Inferno) of the     Google Chrome Security Team used the Address Sanitizer     tool to discover a series of use-after-free problems     rated critical as security issues in shipped software.
    Some of these issues are potentially exploitable,     allowing for remote code execution. We would also like     to thank Abhishek for reporting additional     use-after-free and buffer overflow flaws in code     introduced during Firefox development. These were fixed     before general release. (MFSA 2013-50)

  - Heap-use-after-free in     mozilla::dom::HTMLMediaElement::LookupMediaElementURITab     le. (CVE-2013-1684)

  - Heap-use-after-free in nsIDocument::GetRootElement.
    (CVE-2013-1685)

  - Heap-use-after-free in mozilla::ResetDir.
    (CVE-2013-1686)

  - Security researcher Mariusz Mlynski reported that it is     possible to compile a user-defined function in the XBL     scope of a specific element and then trigger an event     within this scope to run code. In some circumstances,     when this code is run, it can access content protected     by System Only Wrappers (SOW) and chrome-privileged     pages. This could potentially lead to arbitrary code     execution. Additionally, Chrome Object Wrappers (COW)     can be bypassed by web content to access privileged     methods, leading to a cross-site scripting (XSS) attack     from privileged pages. (MFSA 2013-51 / CVE-2013-1687)

  - Security researcher Nils reported that specially crafted     web content using the onreadystatechange event and     reloading of pages could sometimes cause a crash when     unmapped memory is executed. This crash is potentially     exploitable. (MFSA 2013-53 / CVE-2013-1690)

  - Security researcher Johnathan Kuskos reported that     Firefox is sending data in the body of XMLHttpRequest     (XHR) HEAD requests, which goes against the XHR     specification. This can potentially be used for     Cross-Site Request Forgery (CSRF) attacks against sites     which do not distinguish between HEAD and POST requests.
    (MFSA 2013-54 / CVE-2013-1692)

  - Security researcher Paul Stone of Context Information     Security discovered that timing differences in the     processing of SVG format images with filters could allow     for pixel values to be read. This could potentially     allow for text values to be read across domains, leading     to information disclosure. (MFSA 2013-55 /     CVE-2013-1693)

  - Mozilla security researcher moz_bug_r_a4 reported that     XrayWrappers can be bypassed to call content-defined     toString and valueOf methods through DefaultValue. This     can lead to unexpected behavior when privileged code     acts on the incorrect values. (MFSA 2013-59 /     CVE-2013-1697)

Mozilla xulrunner was update to 17.0.7esr (bnc#825935)

Security issues fixed :

  - MFSA 2013-49/CVE-2013-1682 Miscellaneous memory safety     hazards

  - MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686     Memory corruption found using Address Sanitizer

  - MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)     Privileged content access and execution via XBL

  - MFSA 2013-53/CVE-2013-1690 (bmo#857883) Execution of     unmapped memory through onreadystatechange event

  - MFSA 2013-54/CVE-2013-1692 (bmo#866915) Data in the body     of XHR HEAD requests leads to CSRF attacks

  - MFSA 2013-55/CVE-2013-1693 (bmo#711043) SVG filters can     lead to information disclosure

  - MFSA 2013-56/CVE-2013-1694 (bmo#848535) PreserveWrapper     has inconsistent behavior

  - MFSA 2013-59/CVE-2013-1697 (bmo#858101) XrayWrappers can     be bypassed to run user defined methods in a privileged     context

seamonkey was updated to 2.19 (bnc#825935) to fix bugs and security issues.

Security issues fixed :

  - MFSA 2013-49/CVE-2013-1682/CVE-2013-1683 Miscellaneous     memory safety hazards

  - MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686     Memory corruption found using Address Sanitizer

  - MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)     Privileged content access and execution via XBL

  - MFSA 2013-52/CVE-2013-1688 (bmo#873966) Arbitrary code     execution within Profiler

  - MFSA 2013-53/CVE-2013-1690 (bmo#857883) Execution of     unmapped memory through onreadystatechange event

  - MFSA 2013-54/CVE-2013-1692 (bmo#866915) Data in the body     of XHR HEAD requests leads to CSRF attacks

  - MFSA 2013-55/CVE-2013-1693 (bmo#711043) SVG filters can     lead to information disclosure

  - MFSA 2013-56/CVE-2013-1694 (bmo#848535) PreserveWrapper     has inconsistent behavior

  - MFSA 2013-57/CVE-2013-1695 (bmo#849791) Sandbox     restrictions not applied to nested frame elements

  - MFSA 2013-58/CVE-2013-1696 (bmo#761667) X-Frame-Options     ignored when using server push with multi-part responses

  - MFSA 2013-59/CVE-2013-1697 (bmo#858101) XrayWrappers can     be bypassed to run user defined methods in a privileged     context

  - MFSA 2013-60/CVE-2013-1698 (bmo#876044) getUserMedia     permission dialog incorrectly displays location

  - MFSA 2013-61/CVE-2013-1699 (bmo#840882) Homograph domain     spoofing in .com, .net and .name

The installed version of Thunderbird is earlier than 17.0.7 and is, therefore, potentially affected by the following vulnerabilities :

  - Various, unspecified memory safety issues exist.
    (CVE-2013-1682, CVE-2013-1683)

  - Heap-use-after-free errors exist related to     'LookupMediaElementURITable',     'nsIDocument::GetRootElement' and 'mozilla::ResetDir'.
    (CVE-2013-1684, CVE-2013-1685, CVE-2013-1686)

  - An error exists related to 'XBL scope', 'System Only     Wrappers' (SOW) and chrome-privileged pages that could     allow cross-site scripting attacks. (CVE-2013-1687)

  - An error exists related to the 'profiler' that could     allow arbitrary code execution. (CVE-2013-1688)

  - An error related to 'onreadystatechange' and unmapped     memory could cause application crashes and allow     arbitrary code execution. (CVE-2013-1690)

  - The application sends data in the body of XMLHttpRequest     (XHR) HEAD requests and could aid in cross-site request     forgery attacks. (CVE-2013-1692)

  - An error related to the processing of SVG content could     allow a timing attack to disclose information across     domains. (CVE-2013-1693)

  - An error exists related to 'PreserveWrapper' and the     'preserved-wrapper' flag that could cause potentially     exploitable application crashes. (CVE-2013-1694)

  - An error exists related to '<iframe sandbox>'     restrictions that could allow a bypass of these     restrictions. (CVE-2013-1695)

  - The 'X-Frame-Options' header is ignored in certain     situations and can aid in click-jacking attacks.
    (CVE-2013-1696)

  - An error exists related to the 'toString' and 'valueOf'     methods that could allow 'XrayWrappers' to be bypassed.
    (CVE-2013-1697)

  - An error exists related to the 'getUserMedia'     permission dialog that could allow a user to be tricked     into giving access to unintended domains.
    (CVE-2013-1698)

  - Homograph domain spoofing protection is incomplete and     certain attacks are still possible using     Internationalized Domain Names (IDN). (CVE-2013-1699)

The installed version of Thunderbird ESR 17.x is earlier than 17.0.7 and is, therefore, potentially affected the following vulnerabilities:

  - Various, unspecified memory safety issues exist.
    (CVE-2013-1682)

  - Heap-use-after-free errors exist related to     'LookupMediaElementURITable',     'nsIDocument::GetRootElement' and 'mozilla::ResetDir'.
    (CVE-2013-1684, CVE-2013-1685, CVE-2013-1686)

  - An error exists related to 'XBL scope', 'System Only     Wrappers' (SOW) and chrome-privileged pages that could     allow cross-site scripting attacks. (CVE-2013-1687)

  - An error related to 'onreadystatechange' and unmapped     memory could cause application crashes and allow     arbitrary code execution. (CVE-2013-1690)

  - The application sends data in the body of XMLHttpRequest     (XHR) HEAD requests and could aid in cross-site request     forgery attacks. (CVE-2013-1692)

  - An error related to the processing of SVG content could     allow a timing attack to disclose information across     domains. (CVE-2013-1693)

  - An error exists related to 'PreserveWrapper' and the     'preserved-wrapper' flag that could cause potentially     exploitable application crashes. (CVE-2013-1694)

  - An error exists related to the 'toString' and 'valueOf'     methods that could allow 'XrayWrappers' to be bypassed.
    (CVE-2013-1697)

The remote host is affected by the vulnerability described in GLSA-201309-23 (Mozilla Products: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Firefox,       Thunderbird, and SeaMonkey. Please review the CVE identifiers referenced       below for details.
  Impact :

    A remote attacker could entice a user to view a specially crafted web       page or email, possibly resulting in execution of arbitrary code or a       Denial of Service condition. Further, a remote attacker could conduct XSS       attacks, spoof URLs, bypass address space layout randomization, conduct       clickjacking attacks, obtain potentially sensitive information, bypass       access restrictions, modify the local filesystem, or conduct other       unspecified attacks.
  Workaround :

    There is no known workaround at this time.

The version of Thunderbird installed on the remote Windows host is prior to 17.0.7. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-54 advisory.

  - Do not send data XHR HEAD request(CVE-2013-1692) (CVE-2013-1692)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote Windows host is prior to 17.0.7. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-54 advisory.

  - Do not send data XHR HEAD request(CVE-2013-1692) (CVE-2013-1692)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 17.0.7. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-54 advisory.

  - Do not send data XHR HEAD request(CVE-2013-1692) (CVE-2013-1692)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2013-1682, CVE-2013-1684, CVE-2013-1685, CVE-2013-1686, CVE-2013-1687, CVE-2013-1690)

It was found that Firefox allowed data to be sent in the body of XMLHttpRequest (XHR) HEAD requests. In some cases this could allow attackers to conduct Cross-Site Request Forgery (CSRF) attacks.
(CVE-2013-1692)

Timing differences in the way Firefox processed SVG image files could allow an attacker to read data across domains, potentially leading to information disclosure. (CVE-2013-1693)

Two flaws were found in the way Firefox implemented some of its internal structures (called wrappers). An attacker could use these flaws to bypass some restrictions placed on them. This could lead to unexpected behavior or a potentially exploitable crash.
(CVE-2013-1694, CVE-2013-1697)

0.7 ESR, which corrects these issues. After installing the update, Firefox must be restarted for the changes to take effect.

Several flaws were found in the processing of malformed content.
Malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2013-1682, CVE-2013-1684, CVE-2013-1685, CVE-2013-1686, CVE-2013-1687, CVE-2013-1690)

It was found that Thunderbird allowed data to be sent in the body of XMLHttpRequest (XHR) HEAD requests. In some cases this could allow attackers to conduct Cross-Site Request Forgery (CSRF) attacks.
(CVE-2013-1692)

Timing differences in the way Thunderbird processed SVG image files could allow an attacker to read data across domains, potentially leading to information disclosure. (CVE-2013-1693)

Two flaws were found in the way Thunderbird implemented some of its internal structures (called wrappers). An attacker could use these flaws to bypass some restrictions placed on them. This could lead to unexpected behavior or a potentially exploitable crash.
(CVE-2013-1694, CVE-2013-1697)

Note: All of the above issues cannot be exploited by a specially crafted HTML mail message as JavaScript is disabled by default for mail messages. They could be exploited another way in Thunderbird, for example, when viewing the full remote content of an RSS feed.

0.7 ESR, which corrects these issues. After installing the update, Thunderbird must be restarted for the changes to take effect.

The installed version of Firefox ESR 17.x is earlier than 17.0.7 and is, therefore, potentially affected by the following vulnerabilities :

  - Various, unspecified memory safety issues exist.
    (CVE-2013-1682)

  - Heap-use-after-free errors exist related to     'LookupMediaElementURITable',     'nsIDocument::GetRootElement' and 'mozilla::ResetDir'.
    (CVE-2013-1684, CVE-2013-1685, CVE-2013-1686)

  - An error exists related to 'XBL scope', 'System Only     Wrappers' (SOW) and chrome-privileged pages that could     allow cross-site scripting attacks. (CVE-2013-1687)

  - An error related to 'onreadystatechange' and unmapped     memory could cause application crashes and allow     arbitrary code execution. (CVE-2013-1690)

  - The application sends data in the body of XMLHttpRequest     (XHR) HEAD requests and could aid in cross-site request     forgery attacks. (CVE-2013-1692)

  - An error related to the processing of SVG content could     allow a timing attack to disclose information across     domains. (CVE-2013-1693)

  - An error exists related to 'PreserveWrapper' and the     'preserved-wrapper' flag that could cause potentially     exploitable application crashes. (CVE-2013-1694)

  - An error exists related to the 'toString' and 'valueOf'     methods that could allow 'XrayWrappers' to be bypassed.
    (CVE-2013-1697)

The installed version of Firefox ESR 17.x is earlier than 17.0.7, and is, therefore, potentially affected by the following vulnerabilities :

  - Various, unspecified memory safety issues exist.
    (CVE-2013-1682)

  - Heap-use-after-free errors exist related to     'LookupMediaElementURITable',     'nsIDocument::GetRootElement' and 'mozilla::ResetDir'.
    (CVE-2013-1684, CVE-2013-1685, CVE-2013-1686)

  - An error exists related to 'XBL scope', 'System Only     Wrappers' (SOW) and chrome-privileged pages that could     allow cross-site scripting attacks. (CVE-2013-1687)

  - An error related to 'onreadystatechange' and unmapped     memory could cause application crashes and allow     arbitrary code execution. (CVE-2013-1690)

  - The application sends data in the body of XMLHttpRequest     (XHR) HEAD requests and could aid in cross-site request     forgery attacks. (CVE-2013-1692)

  - An error related to the processing of SVG content could     allow a timing attack to disclose information across     domains. (CVE-2013-1693)

  - An error exists related to 'PreserveWrapper' and the     'preserved-wrapper' flag that could cause potentially     exploitable application crashes. (CVE-2013-1694)

  - An error exists related to the 'toString' and 'valueOf'     methods that could allow 'XrayWrappers' to be bypassed.
    (CVE-2013-1697)

The Mozilla Project reports :

Miscellaneous memory safety hazards (rv:22.0 / rv:17.0.7)

Title: Memory corruption found using Address Sanitizer

Privileged content access and execution via XBL

Arbitrary code execution within Profiler

Execution of unmapped memory through onreadystatechange

Data in the body of XHR HEAD requests leads to CSRF attacks

SVG filters can lead to information disclosure

PreserveWrapper has inconsistent behavior

Sandbox restrictions not applied to nested frame elements

X-Frame-Options ignored when using server push with multi-part responses

XrayWrappers can be bypassed to run user defined methods in a privileged context

getUserMedia permission dialog incorrectly displays location

Homograph domain spoofing in .com, .net and .name

Inaccessible updater can lead to local privilege escalation

Multiple memory safety issues were discovered in Thunderbird. If the user were tricked into opening a specially crafted message with scripting enabled, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute arbitrary code with the privileges of the user invoking Thunderbird.
(CVE-2013-1682)

Abhishek Arya discovered multiple use-after-free bugs. If the user were tricked into opening a specially crafted message with scripting enabled, an attacker could possibly exploit these to execute arbitrary code with the privileges of the user invoking Thunderbird.
(CVE-2013-1684, CVE-2013-1685, CVE-2013-1686)

Mariusz Mlynski discovered that user defined code within the XBL scope of an element could be made to bypass System Only Wrappers (SOW). If a user had scripting enabled, an attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2013-1687)

A crash was discovered when reloading a page that contained content using the onreadystatechange event. If a user had scripting enabled, an attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2013-1690)

Johnathan Kuskos discovered that Thunderbird sent data in the body of XMLHttpRequest HEAD requests. If a user had scripting enabled, an attacker could exploit this to conduct Cross-Site Request Forgery (CSRF) attacks. (CVE-2013-1692)

Paul Stone discovered a timing flaw in the processing of SVG images with filters. If a user had scripting enabled, an attacker could exploit this to view sensitive information. (CVE-2013-1693)

Boris Zbarsky discovered a flaw in PreserveWrapper. If a user had scripting enabled, an attacker could potentially exploit this to cause a denial of service via application crash, or execute code with the privileges of the user invoking Thunderbird. (CVE-2013-1694)

It was discovered that XrayWrappers could be bypassed to call content-defined methods in certain circumstances. If a user had scripting enabled, an attacker could exploit this to cause undefined behaviour. (CVE-2013-1697).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors, use-after-free vulnerabilities, missing permission checks, incorrect memory handling and other implementation errors may lead to the execution of arbitrary code, privilege escalation, information disclosure or cross-site request forgery.

The Iceweasel version in the oldstable distribution (squeeze) is no longer supported with security updates.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
67195	SuSE 11.2 Security Update : Mozilla Firefox (SAT Patch Number 7976)	Nessus	SuSE Local Security Checks	2013/7/6	2022/3/29	critical
75072	openSUSE Security Update : xulrunner (openSUSE-SU-2013:1143-1)	Nessus	SuSE Local Security Checks	2014/6/13	2022/3/29	critical
75081	openSUSE Security Update : seamonkey (openSUSE-SU-2013:1180-1)	Nessus	SuSE Local Security Checks	2014/6/13	2022/3/29	critical
66990	Thunderbird < 17.0.7 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	2013/6/26	2022/3/29	critical
66995	Mozilla Thunderbird ESR 17.x < 17.0.7 Multiple Vulnerabilities	Nessus	Windows	2013/6/26	2022/3/29	critical
70183	GLSA-201309-23 : Mozilla Products: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2013/9/28	2022/3/29	critical
279131	Mozilla Thunderbird < 17.0.7	Nessus	Windows	2025/12/18	2025/12/18	high
279153	Mozilla Firefox ESR < 17.0.7	Nessus	Windows	2025/12/18	2025/12/18	high
279176	Mozilla Firefox ESR < 17.0.7	Nessus	MacOS X Local Security Checks	2025/12/18	2025/12/18	high
66983	Scientific Linux Security Update : firefox on SL5.x, SL6.x i386/x86_64 (20130625)	Nessus	Scientific Linux Local Security Checks	2013/6/26	2022/3/29	critical
66984	Scientific Linux Security Update : thunderbird on SL5.x, SL6.x i386/x86_64 (20130625)	Nessus	Scientific Linux Local Security Checks	2013/6/26	2022/3/29	critical
66988	Firefox ESR 17.x < 17.0.7 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	2013/6/26	2026/3/3	critical
66992	Firefox ESR 17.x < 17.0.7 Multiple Vulnerabilities	Nessus	Windows	2013/6/26	2026/6/23	critical
66999	FreeBSD : mozilla -- multiple vulnerabilities (b3fcb387-de4b-11e2-b1c6-0025905a4771)	Nessus	FreeBSD Local Security Checks	2013/6/27	2022/3/29	critical
67001	Ubuntu 12.04 LTS / 12.10 / 13.04 : thunderbird vulnerabilities (USN-1891-1)	Nessus	Ubuntu Local Security Checks	2013/6/27	2022/3/29	critical
67101	Debian DSA-2716-1 : iceweasel - several vulnerabilities	Nessus	Debian Local Security Checks	2013/6/29	2022/3/29	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

high

high

high

critical

critical

critical

critical

critical

critical

critical