[Forgot Password]
Login  Register Subscribe

24128

 
 

131615

 
 

111580

 
 

909

 
 

86902

 
 

136

Paid content will be excluded from the download.


Download | Alert*
OVAL

Mozilla Products: Access violation with XSLT and uninitialized data - mfsa2013-95

ID: oval:org.secpod.oval:def:16293Date: (C)2013-12-30   (M)2018-06-09
Class: PATCHFamily: macos




Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team used the Address Sanitizer tool to discover an access violation due to uninitialized data during Extensible Stylesheet Language Transformation (XSLT) processing. This leads to a potentially exploitable crash.

Platform:
Apple Mac OS X 10.8
Apple Mac OS X 10.9
Apple Mac OS X 10.10
Apple Mac OS X 10.11
Apple Mac OS X 10.12
Apple Mac OS X Server 10.8
Apple Mac OS X Server 10.9
Apple Mac OS X Server 10.10
Apple Mac OS X Server 10.11
Apple Mac OS X Server 10.12
Product:
Mozilla Firefox
Mozilla Thunderbird ESR
Mozilla SeaMonkey
Mozilla Thunderbird
Mozilla Firefox ESR
Reference:
MFSA 2013-95
CVE-2013-5604
CVE    1
CVE-2013-5604
CPE    154
cpe:/a:mozilla:thunderbird_esr
cpe:/a:mozilla:seamonkey:2.11:beta3
cpe:/a:mozilla:seamonkey:2.11:beta2
cpe:/a:mozilla:seamonkey:2.11:beta5
...

© SecPod Technologies