CVE-2013-1708

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2013-1708 at MITRE

Description

Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (application crash) via a crafted WAV file that is not properly handled by the nsCString::CharAt function.

NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

SUSE information

SUSE Bugzilla entry: 833389

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
openSUSE 12.3
  • MozillaFirefox >= 23.0-1.29.1
  • MozillaFirefox-branding-upstream >= 23.0-1.29.1
  • MozillaFirefox-buildsymbols >= 23.0-1.29.1
  • MozillaFirefox-debuginfo >= 23.0-1.29.1
  • MozillaFirefox-debugsource >= 23.0-1.29.1
  • MozillaFirefox-devel >= 23.0-1.29.1
  • MozillaFirefox-translations-common >= 23.0-1.29.1
  • MozillaFirefox-translations-other >= 23.0-1.29.1
  • MozillaThunderbird >= 17.0.8-61.21.2
  • MozillaThunderbird-buildsymbols >= 17.0.8-61.21.2
  • MozillaThunderbird-debuginfo >= 17.0.8-61.21.2
  • MozillaThunderbird-debugsource >= 17.0.8-61.21.2
  • MozillaThunderbird-devel >= 17.0.8-61.21.2
  • MozillaThunderbird-devel-debuginfo >= 17.0.8-61.21.2
  • MozillaThunderbird-translations-common >= 17.0.8-61.21.2
  • MozillaThunderbird-translations-other >= 17.0.8-61.21.2
  • enigmail >= 1.5.2+17.0.8-61.21.2
  • enigmail-debuginfo >= 1.5.2+17.0.8-61.21.2
  • libfreebl3 >= 3.15.1-1.12.1
  • libfreebl3-32bit >= 3.15.1-1.12.1
  • libfreebl3-debuginfo >= 3.15.1-1.12.1
  • libfreebl3-debuginfo-32bit >= 3.15.1-1.12.1
  • libsoftokn3 >= 3.15.1-1.12.1
  • libsoftokn3-32bit >= 3.15.1-1.12.1
  • libsoftokn3-debuginfo >= 3.15.1-1.12.1
  • libsoftokn3-debuginfo-32bit >= 3.15.1-1.12.1
  • mozilla-js >= 17.0.8-1.24.1
  • mozilla-js-32bit >= 17.0.8-1.24.1
  • mozilla-js-debuginfo >= 17.0.8-1.24.1
  • mozilla-js-debuginfo-32bit >= 17.0.8-1.24.1
  • mozilla-nspr >= 4.10-1.14.1
  • mozilla-nspr-32bit >= 4.10-1.14.1
  • mozilla-nspr-debuginfo >= 4.10-1.14.1
  • mozilla-nspr-debuginfo-32bit >= 4.10-1.14.1
  • mozilla-nspr-debugsource >= 4.10-1.14.1
  • mozilla-nspr-devel >= 4.10-1.14.1
  • mozilla-nss >= 3.15.1-1.12.1
  • mozilla-nss-32bit >= 3.15.1-1.12.1
  • mozilla-nss-certs >= 3.15.1-1.12.1
  • mozilla-nss-certs-32bit >= 3.15.1-1.12.1
  • mozilla-nss-certs-debuginfo >= 3.15.1-1.12.1
  • mozilla-nss-certs-debuginfo-32bit >= 3.15.1-1.12.1
  • mozilla-nss-debuginfo >= 3.15.1-1.12.1
  • mozilla-nss-debuginfo-32bit >= 3.15.1-1.12.1
  • mozilla-nss-debugsource >= 3.15.1-1.12.1
  • mozilla-nss-devel >= 3.15.1-1.12.1
  • mozilla-nss-sysinit >= 3.15.1-1.12.1
  • mozilla-nss-sysinit-32bit >= 3.15.1-1.12.1
  • mozilla-nss-sysinit-debuginfo >= 3.15.1-1.12.1
  • mozilla-nss-sysinit-debuginfo-32bit >= 3.15.1-1.12.1
  • mozilla-nss-tools >= 3.15.1-1.12.1
  • mozilla-nss-tools-debuginfo >= 3.15.1-1.12.1
  • seamonkey >= 2.20-1.16.1
  • seamonkey-debuginfo >= 2.20-1.16.1
  • seamonkey-debugsource >= 2.20-1.16.1
  • seamonkey-dom-inspector >= 2.20-1.16.1
  • seamonkey-irc >= 2.20-1.16.1
  • seamonkey-translations-common >= 2.20-1.16.1
  • seamonkey-translations-other >= 2.20-1.16.1
  • seamonkey-venkman >= 2.20-1.16.1
  • xulrunner >= 17.0.8-1.24.1
  • xulrunner-32bit >= 17.0.8-1.24.1
  • xulrunner-buildsymbols >= 17.0.8-1.24.1
  • xulrunner-debuginfo >= 17.0.8-1.24.1
  • xulrunner-debuginfo-32bit >= 17.0.8-1.24.1
  • xulrunner-debugsource >= 17.0.8-1.24.1
  • xulrunner-devel >= 17.0.8-1.24.1
  • xulrunner-devel-debuginfo >= 17.0.8-1.24.1
Patchnames:
openSUSE-2013-652
openSUSE Evergreen 11.4
  • MozillaFirefox >= 23.0-83.1
  • MozillaFirefox-branding-upstream >= 23.0-83.1
  • MozillaFirefox-buildsymbols >= 23.0-83.1
  • MozillaFirefox-debuginfo >= 23.0-83.1
  • MozillaFirefox-debugsource >= 23.0-83.1
  • MozillaFirefox-devel >= 23.0-83.1
  • MozillaFirefox-translations-common >= 23.0-83.1
  • MozillaFirefox-translations-other >= 23.0-83.1
  • MozillaThunderbird >= 17.0.8-69.2
  • MozillaThunderbird-buildsymbols >= 17.0.8-69.2
  • MozillaThunderbird-debuginfo >= 17.0.8-69.2
  • MozillaThunderbird-debugsource >= 17.0.8-69.2
  • MozillaThunderbird-devel >= 17.0.8-69.2
  • MozillaThunderbird-devel-debuginfo >= 17.0.8-69.2
  • MozillaThunderbird-translations-common >= 17.0.8-69.2
  • MozillaThunderbird-translations-other >= 17.0.8-69.2
  • enigmail >= 1.5.2+17.0.8-69.2
  • enigmail-debuginfo >= 1.5.2+17.0.8-69.2
  • libfreebl3 >= 3.15.1-62.1
  • libfreebl3-32bit >= 3.15.1-62.1
  • libfreebl3-debuginfo >= 3.15.1-62.1
  • libfreebl3-debuginfo-32bit >= 3.15.1-62.1
  • libfreebl3-debuginfo-x86 >= 3.15.1-62.1
  • libfreebl3-x86 >= 3.15.1-62.1
  • libsoftokn3 >= 3.15.1-62.1
  • libsoftokn3-32bit >= 3.15.1-62.1
  • libsoftokn3-debuginfo >= 3.15.1-62.1
  • libsoftokn3-debuginfo-32bit >= 3.15.1-62.1
  • libsoftokn3-debuginfo-x86 >= 3.15.1-62.1
  • libsoftokn3-x86 >= 3.15.1-62.1
  • mozilla-nspr >= 4.10-28.1
  • mozilla-nspr-32bit >= 4.10-28.1
  • mozilla-nspr-debuginfo >= 4.10-28.1
  • mozilla-nspr-debuginfo-32bit >= 4.10-28.1
  • mozilla-nspr-debuginfo-x86 >= 4.10-28.1
  • mozilla-nspr-debugsource >= 4.10-28.1
  • mozilla-nspr-devel >= 4.10-28.1
  • mozilla-nspr-x86 >= 4.10-28.1
  • mozilla-nss >= 3.15.1-62.1
  • mozilla-nss-32bit >= 3.15.1-62.1
  • mozilla-nss-certs >= 3.15.1-62.1
  • mozilla-nss-certs-32bit >= 3.15.1-62.1
  • mozilla-nss-certs-debuginfo >= 3.15.1-62.1
  • mozilla-nss-certs-debuginfo-32bit >= 3.15.1-62.1
  • mozilla-nss-certs-debuginfo-x86 >= 3.15.1-62.1
  • mozilla-nss-certs-x86 >= 3.15.1-62.1
  • mozilla-nss-debuginfo >= 3.15.1-62.1
  • mozilla-nss-debuginfo-32bit >= 3.15.1-62.1
  • mozilla-nss-debuginfo-x86 >= 3.15.1-62.1
  • mozilla-nss-debugsource >= 3.15.1-62.1
  • mozilla-nss-devel >= 3.15.1-62.1
  • mozilla-nss-sysinit >= 3.15.1-62.1
  • mozilla-nss-sysinit-32bit >= 3.15.1-62.1
  • mozilla-nss-sysinit-debuginfo >= 3.15.1-62.1
  • mozilla-nss-sysinit-debuginfo-32bit >= 3.15.1-62.1
  • mozilla-nss-sysinit-debuginfo-x86 >= 3.15.1-62.1
  • mozilla-nss-sysinit-x86 >= 3.15.1-62.1
  • mozilla-nss-tools >= 3.15.1-62.1
  • mozilla-nss-tools-debuginfo >= 3.15.1-62.1
  • mozilla-nss-x86 >= 3.15.1-62.1
  • seamonkey >= 2.20-73.1
  • seamonkey-debuginfo >= 2.20-73.1
  • seamonkey-debugsource >= 2.20-73.1
  • seamonkey-dom-inspector >= 2.20-73.1
  • seamonkey-irc >= 2.20-73.1
  • seamonkey-translations-common >= 2.20-73.1
  • seamonkey-translations-other >= 2.20-73.1
  • seamonkey-venkman >= 2.20-73.1
Patchnames:
2013-122