The Mozilla Project reports :

Miscellaneous memory safety hazards (rv:22.0 / rv:17.0.7)

Title: Memory corruption found using Address Sanitizer

Privileged content access and execution via XBL

Arbitrary code execution within Profiler

Execution of unmapped memory through onreadystatechange

Data in the body of XHR HEAD requests leads to CSRF attacks

SVG filters can lead to information disclosure

PreserveWrapper has inconsistent behavior

Sandbox restrictions not applied to nested frame elements

X-Frame-Options ignored when using server push with multi-part responses

XrayWrappers can be bypassed to run user defined methods in a privileged context

getUserMedia permission dialog incorrectly displays location

Homograph domain spoofing in .com, .net and .name

Inaccessible updater can lead to local privilege escalation

Mozilla プロジェクトによる報告：

様々なメモリ安全性の問題（rv:22.0 / rv:17.0.7）

タイトル：Address Sanitizer の使用で見つかったメモリ破損

権限のあるコンテンツアクセスと XBL による実行

Profiler における任意のコードの実行

マッピされていないメモリの onreadystatechange を通じた実行

XHR HEAD リクエストの本文のデータは、CSRF 攻撃を引き起こします

SVG フィルターにより情報漏洩が引き起こされる可能性があります

PreserveWrapper の挙動が一貫していません

ネスト化したフレーム要素に、サンドボックス制限が適用されません

X-Frame-Options は、マルチパート応答を伴うサーバープッシュを使用している場合は無視されます

XrayWrappers は、権限のあるコンテキストでユーザーが定義したメソッドを実行するためにバイパス可能です

getUserMedia 権限ダイアログがロケーションを不適切に表示します

.com、.net および .name におけるホモグラフドメインのなりすまし

アクセスできないアップデーターにより、ローカルの権限昇格が引き起こされる可能性があります

Mozilla Project 報告：

其他記憶體安全性危險 (rv:22.0 / rv:17.0.7)

標題：使用位址偵察工具發現的記憶體損毀

透過 XBL 存取與執行有權限的內容

在 Profiler 內執行任意程式碼

透過 onreadystatechange 執行取消對應的記憶體

XHR HEAD 要求內文中的資料導致 CSRF 攻擊

SVG 篩選會導致資訊洩漏

PreserveWrapper 的行為不一致

沙箱限制沒有套用至巢狀框架元素

使用具有多重回應的伺服器發送時，X-Frame-Options 遭到忽略

XrayWrappers 會被繞過，以在有權限的內容中執行使用者定義的方法

getUserMedia 權限對話的位置顯示錯誤

com、.net 和 .name 的偽裝網域偽造

無法存取的更新程式可導致本機權限提升

Mozilla 项目报告：

多项内存安全危害 (rv:22.0 / rv:17.0.7)

标题：使用地址审查器发现内存损坏

通过 XBL 进行的特权内容访问和执行

探查器中的任意代码执行

通过 onreadystatechange 执行的未映射内存

XHR HEAD 请求正文中的数据导致 CSRF 攻击

SVG 过滤器可导致信息泄露

PreserveWrapper 具有不一致的行为

沙盒限制未应用到嵌套的框架元素

使用具有多部分响应的服务器推送时忽略 X-Frame-Option

可绕过 XrayWrapper 以便在特权上下文中运行用户定义的方法

getUserMedia 权限对话框错误地显示位置

.com、.net 和 .name 中的同形异义词域欺骗

不可访问的更新程序可导致本地权限升级

The installed version of Thunderbird is a version prior to 17.0.7 and is, therefore, potentially affected by the following vulnerabilities :

  - Various, unspecified memory safety issues exist.
    (CVE-2013-1682, CVE-2013-1683)

  - Heap-use-after-free errors exist related to     'LookupMediaElementURITable',     'nsIDocument::GetRootElement' and 'mozilla::ResetDir'.
    (CVE-2013-1684, CVE-2013-1685, CVE-2013-1686)

  - An error exists related to 'XBL scope', 'System Only     Wrappers' (SOW) and chrome-privileged pages that could     allow cross-site scripting attacks. (CVE-2013-1687)

  - An error exists related to the 'profiler' that could     allow arbitrary code execution. (CVE-2013-1688)

  - An error related to 'onreadystatechange' and unmapped     memory could cause application crashes and allow     arbitrary code execution. (CVE-2013-1690)

  - The application sends data in the body of XMLHttpRequest     (XHR) HEAD requests and could aid in cross-site request     forgery attacks. (CVE-2013-1692)

  - An error related to the processing of SVG content could     allow a timing attack to disclose information across     domains. (CVE-2013-1693)

  - An error exists related to 'PreserveWrapper' and the     'preserved-wrapper' flag that could cause potentially     exploitable application crashes. (CVE-2013-1694)

  - An error exists related to '<iframe sandbox>'     restrictions that could allow a bypass of these     restrictions. (CVE-2013-1695)

  - The 'X-Frame-Options' header is ignored in certain     situations and can aid in click-jacking attacks.
    (CVE-2013-1696)

  - An error exists related to the 'toString' and 'valueOf'     methods that could allow 'XrayWrappers' to be bypassed.
    (CVE-2013-1697)

  - An error exists related to the 'getUserMedia'     permission dialog that could allow a user to be tricked     into giving access to unintended domains.
    (CVE-2013-1698)

  - Homograph domain spoofing protection is incomplete and     certain attacks are still possible using     Internationalized Domain Names (IDN). (CVE-2013-1699)

  - An error exists related to the 'Mozilla Maintenance     Service' on Windows that could allow insecure updates.
    (CVE-2013-1700)

The installed version of Firefox is earlier than 22.0 and is, therefore, potentially affected by the following vulnerabilities :

  - Various, unspecified memory safety issues exist.
    (CVE-2013-1682, CVE-2013-1683)

  - Heap-use-after-free errors exist related to     'LookupMediaElementURITable',     'nsIDocument::GetRootElement' and 'mozilla::ResetDir'.
    (CVE-2013-1684, CVE-2013-1685, CVE-2013-1686)

  - An error exists related to 'XBL scope', 'System Only     Wrappers' (SOW) and chrome-privileged pages that could     allow cross-site scripting attacks. (CVE-2013-1687)

  - An error exists related to the 'profiler' that could     allow arbitrary code execution. (CVE-2013-1688)

  - An error related to 'onreadystatechange' and unmapped     memory could cause application crashes and allow     arbitrary code execution. (CVE-2013-1690)

  - The application sends data in the body of XMLHttpRequest     (XHR) HEAD requests and could aid in cross-site request     forgery attacks. (CVE-2013-1692)

  - An error related to the processing of SVG content could     allow a timing attack to disclose information across     domains. (CVE-2013-1693)

  - An error exists related to 'PreserveWrapper' and the     'preserved-wrapper' flag that could cause potentially     exploitable application crashes. (CVE-2013-1694)

  - An error exists related to '<iframe sandbox>'     restrictions that could allow a bypass of these     restrictions. (CVE-2013-1695)

  - The 'X-Frame-Options' header is ignored in certain     situations and can aid in click-jacking attacks.
    (CVE-2013-1696)

  - An error exists related to the 'toString' and 'valueOf'     methods that could allow 'XrayWrappers' to be bypassed.
    (CVE-2013-1697)

  - An error exists related to the 'getUserMedia'     permission dialog that could allow a user to be tricked     into giving access to unintended domains.
    (CVE-2013-1698)

  - Homograph domain spoofing protection is incomplete and     certain attacks are still possible using     Internationalized Domain Names (IDN). (CVE-2013-1699)

  - An error exists related to the 'Mozilla Maintenance     Service' on Windows that could allow insecure updates.
    (CVE-2013-1700)

安装的 Thunderbird 版本低于 17.0.7，因此可能受到以下漏洞的影响：

- 存在各种不明的内存安全问题。
 （CVE-2013-1682、CVE-2013-1683）

- 存在与“LookupMediaElementURITable”、“nsIDocument::GetRootElement”及“mozilla::ResetDir”相关的释放后使用堆内存错误。
 （CVE-2013-1684、CVE-2013-1685、CVE-2013-1686）

- 存在与“XBL scope”、“System Only Wrappers”(SOW) 及 chrome 权限页面相关的错误，可导致跨站脚本攻击。(CVE-2013-1687)

- 存在与“profiler”相关的错误，可导致任意代码执行。(CVE-2013-1688)

- 与“onreadystatechange”及未映射内存相关的错误可导致应用程序崩溃，并且允许任意代码执行。(CVE-2013-1690)

- 应用程序发送 XMLHttpRequest (XHR) HEAD 请求正文中的数据，可帮助执行跨站请求伪造攻击。(CVE-2013-1692)

- 与 SVG 内容处理相关的错误可导致时序攻击，从而跨域泄露信息。(CVE-2013-1693)

- 存在与“PreserveWrapper”及“preserved-wrapper”标记相关的错误，可导致潜在可利用的应用程序崩溃。(CVE-2013-1694)

- 存在与“<iframe sandbox>”限制相关的错误，可导致绕过这些限制。(CVE-2013-1695)

- 在某些情况下会忽略“X-Frame-Options”标头，可帮助点击劫持攻击。
 (CVE-2013-1696)

- 存在与“toString”及“valueOf”方法相关的错误，可导致绕过“XrayWrappers”。
 (CVE-2013-1697)

- 存在与“getUserMedia”权限对话相关的错误，可导致用户受到诱骗提供对非预期域的访问权限。
 (CVE-2013-1698)

- 伪装域欺骗保护不完整，某些攻击仍可能使用国际化域名 (IDN)。(CVE-2013-1699)

- Windows 上存在与“Mozilla 维护服务”相关的错误，可允许不安全的更新。
 (CVE-2013-1700)

安装的 Firefox 版本低于 22.0，因此可能受到以下漏洞的影响：

- 存在各种不明的内存安全问题。
 （CVE-2013-1682、CVE-2013-1683）

- 存在与“LookupMediaElementURITable”、“nsIDocument::GetRootElement”及“mozilla::ResetDir”相关的释放后使用堆内存错误。
 （CVE-2013-1684、CVE-2013-1685、CVE-2013-1686）

- 存在与“XBL scope”、“System Only Wrappers”(SOW) 及 chrome 权限页面相关的错误，可导致跨站脚本攻击。(CVE-2013-1687)

- 存在与“profiler”相关的错误，可导致任意代码执行。(CVE-2013-1688)

- 与“onreadystatechange”及未映射内存相关的错误可导致应用程序崩溃，并且允许任意代码执行。(CVE-2013-1690)

- 应用程序发送 XMLHttpRequest (XHR) HEAD 请求正文中的数据，可帮助执行跨站请求伪造攻击。(CVE-2013-1692)

- 与 SVG 内容处理相关的错误可导致时序攻击，从而跨域泄露信息。(CVE-2013-1693)

- 存在与“PreserveWrapper”及“preserved-wrapper”标记相关的错误，可导致潜在可利用的应用程序崩溃。(CVE-2013-1694)

- 存在与“<iframe sandbox>”限制相关的错误，可导致绕过这些限制。(CVE-2013-1695)

- 在某些情况下会忽略“X-Frame-Options”标头，可帮助点击劫持攻击。
 (CVE-2013-1696)

- 存在与“toString”及“valueOf”方法相关的错误，可导致绕过“XrayWrappers”。
 (CVE-2013-1697)

- 存在与“getUserMedia”权限对话相关的错误，可导致用户受到诱骗提供对非预期域的访问权限。
 (CVE-2013-1698)

- 伪装域欺骗保护不完整，某些攻击仍可能使用国际化域名 (IDN)。(CVE-2013-1699)

- Windows 上存在与“Mozilla 维护服务”相关的错误，可允许不安全的更新。
 (CVE-2013-1700)

安裝的 Thunderbird 版本比 17.0.7 舊，因此可能會受到下列弱點影響：

- 存在多個不明的記憶體安全問題。
 (CVE-2013-1682、CVE-2013-1683)

- 存在與 'LookupMediaElementURITable'、'nsIDocument::GetRootElement' 和 'mozilla::ResetDir' 相關的堆積釋放後使用錯誤。
 (CVE-2013-1684、CVE-2013-1685、CVE-2013-1686)

- 存在一個與 'XBL scope'、'System Only Wrappers' (SOW)，以及 Chrome 權限頁面相關的錯誤，可允許跨網站指令碼攻擊。(CVE-2013-1687)

- 存在與 'profiler' 相關的錯誤，可允許任意程式碼執行。(CVE-2013-1688)

- 存在與 'onreadystatechange' 相關的錯誤，而且未對應的記憶體可導致應用程式損毀並允許任意程式碼執行。(CVE-2013-1690)

- 應用程式會在 XMLHttpRequest (XHR) HEAD 要求的內文中傳送資料，而且可協助跨網站要求偽造攻擊。(CVE-2013-1692)

- 與處理 SVG 內容相關的錯誤可允許定時攻擊跨網域洩漏資訊。(CVE-2013-1693)

- 存在與 'PreserveWrapper' 和 'preserved-wrapper' 旗標相關的錯誤，可能造成可遭惡意利用的應用程式損毀。(CVE-2013-1694)

- 存在與 '<iframe sandbox>' 限制相關的錯誤，可允許繞過這些限制。(CVE-2013-1695)

- 'X-Frame-Options' 標頭在某些情況下會遭到忽略，而且可以協助點擊劫持攻擊。
 (CVE-2013-1696)

- 存在與 'toString' 和 'valueOf' 方法相關的錯誤，可允許繞過 'XrayWrappers'。
 (CVE-2013-1697)

- 存在與 'getUserMedia' 權限對話方塊相關的錯誤，可讓使用者遭誘騙而提供非預期網域的存取權。
 (CVE-2013-1698)

- 偽裝網域偽造防護不完整，因此某些攻擊仍然可以使用 Internationalized Domain Names (IDN)。(CVE-2013-1699)

- 存在與 Windows 上 'Mozilla Maintenance Service' 相關的錯誤，可允許不安全的更新。
 (CVE-2013-1700)

安裝的 Firefox 版本比 22.0 舊，因此可能會受到以下弱點影響：

- 存在多個不明的記憶體安全問題。
 (CVE-2013-1682、CVE-2013-1683)

- 存在與 'LookupMediaElementURITable'、'nsIDocument::GetRootElement' 和 'mozilla::ResetDir' 相關的堆積釋放後使用錯誤。
 (CVE-2013-1684、CVE-2013-1685、CVE-2013-1686)

- 存在一個與 'XBL scope'、'System Only Wrappers' (SOW)，以及 Chrome 權限頁面相關的錯誤，可允許跨網站指令碼攻擊。(CVE-2013-1687)

- 存在與 'profiler' 相關的錯誤，可允許任意程式碼執行。(CVE-2013-1688)

- 存在與 'onreadystatechange' 相關的錯誤，而且未對應的記憶體可導致應用程式損毀並允許任意程式碼執行。(CVE-2013-1690)

- 應用程式會在 XMLHttpRequest (XHR) HEAD 要求的內文中傳送資料，而且可協助跨網站要求偽造攻擊。(CVE-2013-1692)

- 與處理 SVG 內容相關的錯誤可允許定時攻擊跨網域洩漏資訊。(CVE-2013-1693)

- 存在與 'PreserveWrapper' 和 'preserved-wrapper' 旗標相關的錯誤，可能造成可遭惡意利用的應用程式損毀。(CVE-2013-1694)

- 存在與 '<iframe sandbox>' 限制相關的錯誤，可允許繞過這些限制。(CVE-2013-1695)

- 'X-Frame-Options' 標頭在某些情況下會遭到忽略，而且可以協助點擊劫持攻擊。
 (CVE-2013-1696)

- 存在與 'toString' 和 'valueOf' 方法相關的錯誤，可允許繞過 'XrayWrappers'。
 (CVE-2013-1697)

- 存在與 'getUserMedia' 權限對話方塊相關的錯誤，可讓使用者遭誘騙而提供非預期網域的存取權。
 (CVE-2013-1698)

- 偽裝網域偽造防護不完整，因此某些攻擊仍然可以使用 Internationalized Domain Names (IDN)。(CVE-2013-1699)

- 存在與 Windows 上 'Mozilla Maintenance Service' 相關的錯誤，可允許不安全的更新。
 (CVE-2013-1700)

インストールされている Firefox のバージョンが 22.0 より前であるため、次の脆弱性の影響を受ける可能性があります。

  - さまざまな特定されないメモリの安全性に関する問題が存在します。
    (CVE-2013-1682, CVE-2013-1683)

  - Heap-use-after-free errors exist related to 'LookupMediaElementURITable', 'nsIDocument: : GetRootElement' and 'mozilla: : ResetDir'.
    (CVE-2013-1684, CVE-2013-1685, CVE-2013-1686)

  - An error exists related to 'XBL scope', 'System Only Wrappers' (SOW) and chrome-privileged pages that could allow cross-site scripting attacks. (CVE-2013-1687)

  - An error exists related to the 'profiler' that could allow arbitrary code execution. (CVE-2013-1688)

  - An error related to 'onreadystatechange' and unmapped memory could cause application crashes and allow arbitrary code execution. (CVE-2013-1690)

  - The application sends data in the body of XMLHttpRequest (XHR) HEAD requests and could aid in cross-site request forgery attacks. (CVE-2013-1692)

  - An error related to the processing of SVG content could allow a timing attack to disclose information across domains. (CVE-2013-1693)

  - An error exists related to 'PreserveWrapper' and the 'preserved-wrapper' flag that could cause potentially exploitable application crashes. (CVE-2013-1694)

  - An error exists related to '<iframe sandbox>' restrictions that could allow a bypass of these restrictions. (CVE-2013-1695)

  - 「X-Frame-Options」ヘッダーが状況によっては無視され、クリックジャッキング攻撃を助長することが可能です。
    (CVE-2013-1696)

  - 「toString」と「valueOf」のメソッドに関連してエラーが存在し、「XrayWrappers」をバイパスする可能性があります。
    (CVE-2013-1697)

  - 「getUserMedia」許可ダイアログに関連してエラーが存在し、これによりユーザーを騙まし、意図していないドメインへアクセスさせる可能性があります。
    (CVE-2013-1698)

  - Homograph domain spoofing protection is incomplete and certain attacks are still possible using Internationalized Domain Names (IDN). (CVE-2013-1699)

  - Windows の「Mozilla Maintenance Service」に関連するエラーが存在し、これにより安全でない更新が行われる可能性があります。
    (CVE-2013-1700)

インストールされている Thunderbird のバージョンが 17.0.7 より前であるため、次の脆弱性の影響を受ける可能性があります。

  - さまざまな特定されないメモリの安全性に関する問題が存在します。
    (CVE-2013-1682, CVE-2013-1683)

  - Heap-use-after-free errors exist related to 'LookupMediaElementURITable', 'nsIDocument: : GetRootElement' and 'mozilla: : ResetDir'.
    (CVE-2013-1684, CVE-2013-1685, CVE-2013-1686)

  - An error exists related to 'XBL scope', 'System Only Wrappers' (SOW) and chrome-privileged pages that could allow cross-site scripting attacks. (CVE-2013-1687)

  - An error exists related to the 'profiler' that could allow arbitrary code execution. (CVE-2013-1688)

  - An error related to 'onreadystatechange' and unmapped memory could cause application crashes and allow arbitrary code execution. (CVE-2013-1690)

  - The application sends data in the body of XMLHttpRequest (XHR) HEAD requests and could aid in cross-site request forgery attacks. (CVE-2013-1692)

  - An error related to the processing of SVG content could allow a timing attack to disclose information across domains. (CVE-2013-1693)

  - An error exists related to 'PreserveWrapper' and the 'preserved-wrapper' flag that could cause potentially exploitable application crashes. (CVE-2013-1694)

  - An error exists related to '<iframe sandbox>' restrictions that could allow a bypass of these restrictions. (CVE-2013-1695)

  - 「X-Frame-Options」ヘッダーが状況によっては無視され、クリックジャッキング攻撃を助長することが可能です。
    (CVE-2013-1696)

  - 「toString」と「valueOf」のメソッドに関連してエラーが存在し、「XrayWrappers」をバイパスする可能性があります。
    (CVE-2013-1697)

  - 「getUserMedia」許可ダイアログに関連してエラーが存在し、これによりユーザーを騙まし、意図していないドメインへアクセスさせる可能性があります。
    (CVE-2013-1698)

  - Homograph domain spoofing protection is incomplete and certain attacks are still possible using Internationalized Domain Names (IDN). (CVE-2013-1699)

  - Windows の「Mozilla Maintenance Service」に関連するエラーが存在し、これにより安全でない更新が行われる可能性があります。
    (CVE-2013-1700)

Versions of Firefox 21.x and older are potentially affected by the following security issues :

 - Inaccessible updater can lead to local privilege escalation (CVE-2013-1700)
 - Insufficient validation homographic characters could allow for domain spoofing (CVE-2013-1699)
 - The getUserMedia permission dialog incorrectly displays its origin as that of the top level document rather than its calling page, which could result in incorrect camera or microphone permissions for the affected webpage. (CVE-2013-1698)
 - XrayWrappers can be bypassed to run user defined methods in a privileged context (CVE-2013-1697)
 - X-Frame-Options ignored when using server push with multi-part responses (CVE-2013-1696)
 - Various memory corruption issues, including an arbitrary code execution vulnerability through onreadystatechange event (CVE-2013-1690, CVE-2013-1684, CVE-2013-1685, CVE-2013-1686)
 - Data in the body of XHR HEAD requests leads to CSRF attacks (CVE-2013-1692)
 - SVG filters can lead to information disclosure (CVE-2013-1693)
 - SVG filters can lead to information disclosure via timing attacks (CVE-2013-1693)
 - In certain cases, inconsistencies in PreserveWrapper can lead to an exploitable crash (CVE-2013-1694)
 - Sandbox restrictions not applied to nested frame elements (CVE-2013-1695)
 -  X-Frame-Options header is ignored when server push is used in multi-part responses, which can result in clickjacking (CVE-2013-1696)
 - Privileged content access and execution via XBL, which can lead to arbitrary code execution (CVE-2013-1687)
 - Arbitrary code execution within Profiler (CVE-2013-1688)
 - Miscellaneous memory safety issues specifically against versions 21.0 and 17.0.7 (CVE-2013-1682, CVE-2013-1683)

Versions of Mozilla Thunderbird prior to 17.0.7 are affected by the following vulnerabilites : 

 - Various, unspecified memory safety issues exist.(CVE-2013-1682, CVE-2013-1683)
 - Heap-use-after-free errors exist related to 'LookupMediaElementURITable', 'nsIDocument::GetRootElement' and 'mozilla::ResetDir'. (CVE-2013-1684, CVE-2013-1685, CVE-2013-1686)
 - An error exists related to 'XBL scope', 'System Only Wrappers' (SOW) and chrome-privileged pages that could allow cross-site scripting attacks. (CVE-2013-1687)
 - An error exists related to the 'profiler' that could allow arbitrary code execution. (CVE-2013-1688)
 - An error related to 'onreadystatechange' and unmapped memory could cause application crashes and allow arbitrary code execution. (CVE-2013-1690)
 - The application sends data in the body of XMLHttpRequest (XHR) HEAD requests and could aid in cross-site request forgery attacks. (CVE-2013-1692)
 - An error related to the processing of SVG content could allow a timing attack to disclose information across domains. (CVE-2013-1693)
 - An error exists related to 'PreserveWrapper' and the 'preserved-wrapper' flag that could cause potentially exploitable application crashes. (CVE-2013-1694) - An error exists related to '<iframe sandbox>' restrictions that could allow a bypass of these restrictions. (CVE-2013-1695)
 - The 'X-Frame-Options' header is ignored in certain situations and can aid in click-jacking attacks. (CVE-2013-1696)
 - An error exists related to the 'toString' and 'valueOf' methods that could allow 'XrayWrappers' to be bypassed. (CVE-2013-1697)
 - An error exists related to the 'getUserMedia' permission dialog that could allow a user to be tricked into giving access to unintended domains. (CVE-2013-1698)
 - Homograph domain spoofing protection is incomplete and certain attacks are still possible using Internationalized Domain Names (IDN). (CVE-2013-1699)
 - An error exists related to the 'Mozilla Maintenance Service' on Windows that could allow insecure updates. (CVE-2013-1700)

Versions of Firefox 21.x and older are potentially affected by the following security issues :

  - Inaccessible updater can lead to local privilege escalation (CVE-2013-1700)

  - Insufficient validation homographic characters could allow for domain spoofing (CVE-2013-1699)

  - The getUserMedia permission dialog incorrectly displays its origin as that of the top level document rather than its calling page, which could result in incorrect camera or microphone permissions for the affected webpage. (CVE-2013-1698)

  - XrayWrappers can be bypassed to run user defined methods in a privileged context (CVE-2013-1697)

  - X-Frame-Options ignored when using server push with multi-part responses (CVE-2013-1696)

  - Various memory corruption issues, including an arbitrary code execution vulnerability through onreadystatechange event (CVE-2013-1690, CVE-2013-1684, CVE-2013-1685, CVE-2013-1686)

  - Data in the body of XHR HEAD requests leads to CSRF attacks (CVE-2013-1692)

  - SVG filters can lead to information disclosure (CVE-2013-1693)

  - SVG filters can lead to information disclosure via timing attacks (CVE-2013-1693)

  - In certain cases, inconsistencies in PreserveWrapper can lead to an exploitable crash (CVE-2013-1694)

  - Sandbox restrictions not applied to nested frame elements (CVE-2013-1695)

  -  X-Frame-Options header is ignored when server push is used in multi-part responses, which can result in clickjacking (CVE-2013-1696)

  - Privileged content access and execution via XBL, which can lead to arbitrary code execution (CVE-2013-1687)

  - Arbitrary code execution within Profiler (CVE-2013-1688)

  - Miscellaneous memory safety issues specifically against versions 21.0 and 17.0.7 (CVE-2013-1682, CVE-2013-1683)

Versions of Thunderbird prior to 17.0.7 are potentially affected by the following vulnerabilities : 

  - Various, unspecified memory safety issues exist.(CVE-2013-1682, CVE-2013-1683)\m\m  - Heap-use-after-free errors exist related to 'LookupMediaElementURITable', 'nsIDocument::GetRootElement' and 'mozilla::ResetDir'. (CVE-2013-1684, CVE-2013-1685, CVE-2013-1686)

  - An error exists related to 'XBL scope', 'System Only Wrappers' (SOW) and chrome-privileged pages that could allow cross-site scripting attacks. (CVE-2013-1687)

  - An error exists related to the 'profiler' that could allow arbitrary code execution. (CVE-2013-1688)

  - An error related to 'onreadystatechange' and unmapped memory could cause application crashes and allow arbitrary code execution. (CVE-2013-1690)

  - The application sends data in the body of XMLHttpRequest (XHR) HEAD requests and could aid in cross-site request forgery attacks. (CVE-2013-1692)

  - An error related to the processing of SVG content could allow a timing attack to disclose information across domains. (CVE-2013-1693)

  - An error exists related to 'PreserveWrapper' and the 'preserved-wrapper' flag that could cause potentially exploitable application crashes. (CVE-2013-1694)  -  An error exists related to '&lt;iframe sandbox&gt;' restrictions that could allow a bypass of these restrictions. (CVE-2013-1695)

  - The 'X-Frame-Options' header is ignored in certain situations and can aid in click-jacking attacks. (CVE-2013-1696)

  - An error exists related to the 'toString' and 'valueOf' methods that could allow 'XrayWrappers' to be bypassed. (CVE-2013-1697)

  - An error exists related to the 'getUserMedia' permission dialog that could allow a user to be tricked into giving access to unintended domains. (CVE-2013-1698)

  - Homograph domain spoofing protection is incomplete and certain attacks are still possible using Internationalized Domain Names (IDN). (CVE-2013-1699)

  - An error exists related to the 'Mozilla Maintenance Service' on Windows that could allow insecure updates. (CVE-2013-1700)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
66999	FreeBSD : mozilla -- multiple vulnerabilities (b3fcb387-de4b-11e2-b1c6-0025905a4771)	Nessus	FreeBSD Local Security Checks	2013/6/27	2022/3/29	critical
66999	FreeBSD：mozilla -- 複数の脆弱性（b3fcb387-de4b-11e2-b1c6-0025905a4771）	Nessus	FreeBSD Local Security Checks	2013/6/27	2022/3/29	critical
66999	FreeBSD：mozilla -- 多個弱點 (b3fcb387-de4b-11e2-b1c6-0025905a4771)	Nessus	FreeBSD Local Security Checks	2013/6/27	2022/3/29	critical
66999	FreeBSD：mozilla -- 多种漏洞 (b3fcb387-de4b-11e2-b1c6-0025905a4771)	Nessus	FreeBSD Local Security Checks	2013/6/27	2022/3/29	critical
66994	Mozilla Thunderbird < 17.0.7 Multiple Vulnerabilities	Nessus	Windows	2013/6/26	2022/3/29	critical
66993	Firefox < 22.0 Multiple Vulnerabilities	Nessus	Windows	2013/6/26	2022/3/29	critical
66994	Mozilla Thunderbird < 17.0.7 多种漏洞	Nessus	Windows	2013/6/26	2022/3/29	critical
66993	Firefox < 22.0 多种漏洞	Nessus	Windows	2013/6/26	2022/3/29	critical
66994	Mozilla Thunderbird < 17.0.7 多個弱點	Nessus	Windows	2013/6/26	2022/3/29	critical
66993	Firefox < 22.0 多個弱點	Nessus	Windows	2013/6/26	2022/3/29	critical
66993	Firefox < 22.0複数の脆弱性	Nessus	Windows	2013/6/26	2022/3/29	critical
66994	Mozilla Thunderbird < 17.0.7 の複数の脆弱性	Nessus	Windows	2013/6/26	2022/3/29	critical
6886	Mozilla Firefox < 22.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2013/6/26	2019/3/6	critical
6894	Mozilla Thunderbird < 17.0.7 Multiple Vulnerabilities	Nessus Network Monitor	SMTP Clients	2013/6/28	2019/3/6	high
801353	Mozilla Firefox < 22.0 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2013/6/26		high
801326	Mozilla Thunderbird < 17.0.7 Multiple Vulnerabilities	Log Correlation Engine	SMTP Clients	2013/6/28		high

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

high

high

high