CVE-2013-1694
CVE-2013-1694, security advisory, novell, suse linux, suse, security, cve

CVE-2013-1694

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2013-1694 at MITRE

Description

The PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly handle the lack of a wrapper, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by leveraging unintended clearing of the wrapper cache's preserved-wrapper flag.

SUSE information

CVSS v2 Scores
  National Vulnerability Database
Base Score 7.48
Vector AV:N/AC:L/Au:N/C:P/I:P/A:P
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial
SUSE Bugzilla entry: 825935 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
openSUSE 12.3
  • MozillaFirefox >= 22.0-1.25.1
  • MozillaFirefox-branding-upstream >= 22.0-1.25.1
  • MozillaFirefox-buildsymbols >= 22.0-1.25.1
  • MozillaFirefox-debuginfo >= 22.0-1.25.1
  • MozillaFirefox-debugsource >= 22.0-1.25.1
  • MozillaFirefox-devel >= 22.0-1.25.1
  • MozillaFirefox-translations-common >= 22.0-1.25.1
  • MozillaFirefox-translations-other >= 22.0-1.25.1
  • MozillaThunderbird >= 17.0.7-61.17.1
  • MozillaThunderbird-buildsymbols >= 17.0.7-61.17.1
  • MozillaThunderbird-debuginfo >= 17.0.7-61.17.1
  • MozillaThunderbird-debugsource >= 17.0.7-61.17.1
  • MozillaThunderbird-devel >= 17.0.7-61.17.1
  • MozillaThunderbird-devel-debuginfo >= 17.0.7-61.17.1
  • MozillaThunderbird-translations-common >= 17.0.7-61.17.1
  • MozillaThunderbird-translations-other >= 17.0.7-61.17.1
  • enigmail >= 1.5.1+17.0.7-61.17.1
  • enigmail-debuginfo >= 1.5.1+17.0.7-61.17.1
  • mozilla-js >= 17.0.7-1.20.1
  • mozilla-js-32bit >= 17.0.7-1.20.1
  • mozilla-js-debuginfo >= 17.0.7-1.20.1
  • mozilla-js-debuginfo-32bit >= 17.0.7-1.20.1
  • mozilla-nspr >= 4.9.6-1.10.1
  • mozilla-nspr-32bit >= 4.9.6-1.10.1
  • mozilla-nspr-debuginfo >= 4.9.6-1.10.1
  • mozilla-nspr-debuginfo-32bit >= 4.9.6-1.10.1
  • mozilla-nspr-debugsource >= 4.9.6-1.10.1
  • mozilla-nspr-devel >= 4.9.6-1.10.1
  • seamonkey >= 2.19-1.12.1
  • seamonkey-debuginfo >= 2.19-1.12.1
  • seamonkey-debugsource >= 2.19-1.12.1
  • seamonkey-dom-inspector >= 2.19-1.12.1
  • seamonkey-irc >= 2.19-1.12.1
  • seamonkey-translations-common >= 2.19-1.12.1
  • seamonkey-translations-other >= 2.19-1.12.1
  • seamonkey-venkman >= 2.19-1.12.1
  • xulrunner >= 17.0.7-1.20.1
  • xulrunner-32bit >= 17.0.7-1.20.1
  • xulrunner-buildsymbols >= 17.0.7-1.20.1
  • xulrunner-debuginfo >= 17.0.7-1.20.1
  • xulrunner-debuginfo-32bit >= 17.0.7-1.20.1
  • xulrunner-debugsource >= 17.0.7-1.20.1
  • xulrunner-devel >= 17.0.7-1.20.1
  • xulrunner-devel-debuginfo >= 17.0.7-1.20.1
Patchnames:
openSUSE-2013-554
openSUSE-2013-555
openSUSE-2013-556
openSUSE-2013-574
openSUSE Evergreen 11.4
  • MozillaFirefox >= 24.8.0-127.1
  • MozillaFirefox-branding-upstream >= 24.8.0-127.1
  • MozillaFirefox-buildsymbols >= 24.8.0-127.1
  • MozillaFirefox-debuginfo >= 24.8.0-127.1
  • MozillaFirefox-debugsource >= 24.8.0-127.1
  • MozillaFirefox-devel >= 24.8.0-127.1
  • MozillaFirefox-translations-common >= 24.8.0-127.1
  • MozillaFirefox-translations-other >= 24.8.0-127.1
  • MozillaThunderbird >= 17.0.7-65.1
  • MozillaThunderbird-buildsymbols >= 17.0.7-65.1
  • MozillaThunderbird-debuginfo >= 17.0.7-65.1
  • MozillaThunderbird-debugsource >= 17.0.7-65.1
  • MozillaThunderbird-devel >= 17.0.7-65.1
  • MozillaThunderbird-devel-debuginfo >= 17.0.7-65.1
  • MozillaThunderbird-translations-common >= 17.0.7-65.1
  • MozillaThunderbird-translations-other >= 17.0.7-65.1
  • enigmail >= 1.5.1+17.0.7-65.1
  • enigmail-debuginfo >= 1.5.1+17.0.7-65.1
  • libfreebl3 >= 3.16.4-94.1
  • libfreebl3-32bit >= 3.16.4-94.1
  • libfreebl3-debuginfo >= 3.16.4-94.1
  • libfreebl3-debuginfo-32bit >= 3.16.4-94.1
  • libfreebl3-debuginfo-x86 >= 3.16.4-94.1
  • libfreebl3-x86 >= 3.16.4-94.1
  • libsoftokn3 >= 3.16.4-94.1
  • libsoftokn3-32bit >= 3.16.4-94.1
  • libsoftokn3-debuginfo >= 3.16.4-94.1
  • libsoftokn3-debuginfo-32bit >= 3.16.4-94.1
  • libsoftokn3-debuginfo-x86 >= 3.16.4-94.1
  • libsoftokn3-x86 >= 3.16.4-94.1
  • mozilla-nss >= 3.16.4-94.1
  • mozilla-nss-32bit >= 3.16.4-94.1
  • mozilla-nss-certs >= 3.16.4-94.1
  • mozilla-nss-certs-32bit >= 3.16.4-94.1
  • mozilla-nss-certs-debuginfo >= 3.16.4-94.1
  • mozilla-nss-certs-debuginfo-32bit >= 3.16.4-94.1
  • mozilla-nss-certs-debuginfo-x86 >= 3.16.4-94.1
  • mozilla-nss-certs-x86 >= 3.16.4-94.1
  • mozilla-nss-debuginfo >= 3.16.4-94.1
  • mozilla-nss-debuginfo-32bit >= 3.16.4-94.1
  • mozilla-nss-debuginfo-x86 >= 3.16.4-94.1
  • mozilla-nss-debugsource >= 3.16.4-94.1
  • mozilla-nss-devel >= 3.16.4-94.1
  • mozilla-nss-sysinit >= 3.16.4-94.1
  • mozilla-nss-sysinit-32bit >= 3.16.4-94.1
  • mozilla-nss-sysinit-debuginfo >= 3.16.4-94.1
  • mozilla-nss-sysinit-debuginfo-32bit >= 3.16.4-94.1
  • mozilla-nss-sysinit-debuginfo-x86 >= 3.16.4-94.1
  • mozilla-nss-sysinit-x86 >= 3.16.4-94.1
  • mozilla-nss-tools >= 3.16.4-94.1
  • mozilla-nss-tools-debuginfo >= 3.16.4-94.1
  • mozilla-nss-x86 >= 3.16.4-94.1
  • seamonkey >= 2.19-69.1
  • seamonkey-debuginfo >= 2.19-69.1
  • seamonkey-debugsource >= 2.19-69.1
  • seamonkey-dom-inspector >= 2.19-69.1
  • seamonkey-irc >= 2.19-69.1
  • seamonkey-translations-common >= 2.19-69.1
  • seamonkey-translations-other >= 2.19-69.1
  • seamonkey-venkman >= 2.19-69.1
Patchnames:
2013-101
2013-105
2014-82