CVEvulnerability
CVE-2013-1728
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-09-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-119
Description
The IonMonkey JavaScript engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21, when Valgrind mode is used, does not properly initialize memory, which makes it easier for remote attackers to obtain sensitive information via unspecified vectors.
Affected configurations
• mozilla seamonkey (<= 2.20)
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla seamonkey 2.0.4
• mozilla seamonkey 2.0.5
• mozilla seamonkey 2.0.6
• mozilla seamonkey 2.0.7
• mozilla seamonkey 2.0.8
• mozilla seamonkey 2.0.9
• mozilla seamonkey 2.0.10
• mozilla seamonkey 2.0.11
• mozilla seamonkey 2.0.12
• mozilla seamonkey 2.0.13
• mozilla seamonkey 2.0.14
• mozilla seamonkey 2.1
• mozilla seamonkey 2.10
• mozilla seamonkey 2.10.1
• mozilla seamonkey 2.11
• mozilla seamonkey 2.12
• mozilla seamonkey 2.12.1
• mozilla seamonkey 2.13
• mozilla seamonkey 2.13.1
• mozilla seamonkey 2.13.2
• mozilla seamonkey 2.14
• mozilla seamonkey 2.15
• mozilla seamonkey 2.15.1
• mozilla seamonkey 2.15.2
• mozilla seamonkey 2.16
• mozilla seamonkey 2.16.1
• mozilla seamonkey 2.16.2
• mozilla seamonkey 2.17
• mozilla seamonkey 2.17.1
• mozilla seamonkey 2.18
• mozilla seamonkey 2.19
• mozilla seamonkey 2.20
• mozilla thunderbird (<= 17.0.9)
• mozilla thunderbird 17.0
• mozilla thunderbird 17.0.1
• mozilla thunderbird 17.0.2
• mozilla thunderbird 17.0.3
• mozilla thunderbird 17.0.4
• mozilla thunderbird 17.0.5
• mozilla thunderbird 17.0.6
• mozilla thunderbird 17.0.7
• mozilla thunderbird 17.0.8
• mozilla firefox (<= 23.0.1)
• mozilla firefox 19.0
• mozilla firefox 19.0.1
• mozilla firefox 19.0.2
• mozilla firefox 20.0
• mozilla firefox 20.0.1
• mozilla firefox 21.0
• mozilla firefox 22.0
• mozilla firefox 23.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html lists.opensuse.org
- http://www.mozilla.org/security/announce/2013/mfsa2013-85.html Vendor Advisory
- http://www.securityfocus.com/bid/62468 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1951-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1952-1 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=883686 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18902 oval.cisecurity.org
- http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html lists.opensuse.org
- http://www.mozilla.org/security/announce/2013/mfsa2013-85.html Vendor Advisory
- http://www.securityfocus.com/bid/62468 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1951-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1952-1 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=883686 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18902 oval.cisecurity.org