[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
OVAL

Mozilla Products: Access violation with XSLT and uninitialized data - mfsa2013-95

ID: oval:org.secpod.oval:def:16293Date: (C)2013-12-30   (M)2017-09-22
Class: PATCHFamily: macos




Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team used the Address Sanitizer tool to discover an access violation due to uninitialized data during Extensible Stylesheet Language Transformation (XSLT) processing. This leads to a potentially exploitable crash.

Platform:
Apple Mac OS X 10.8
Apple Mac OS X 10.9
Apple Mac OS X 10.10
Apple Mac OS X 10.11
Apple Mac OS X 10.12
Apple Mac OS X Server 10.8
Apple Mac OS X Server 10.9
Apple Mac OS X Server 10.10
Apple Mac OS X Server 10.11
Apple Mac OS X Server 10.12
Product:
Mozilla Firefox
Mozilla Thunderbird ESR
Mozilla SeaMonkey
Mozilla Thunderbird
Mozilla Firefox ESR
Reference:
MFSA 2013-95
CVE-2013-5604
CVE    1
CVE-2013-5604
CPE    154
cpe:/a:mozilla:thunderbird_esr
cpe:/a:mozilla:firefox_esr:17.0.5
cpe:/a:mozilla:firefox_esr:17.0.4
cpe:/a:mozilla:firefox_esr:17.0.3
...

© 2013 SecPod Technologies