CVE-2013-1728: Buffer Overflow
The IonMonkey JavaScript engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21, when Valgrind mode is used, does not properly initialize memory, which makes it easier for remote attackers to obtain sensitive information via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1728?
CVE-2013-1728 is classified as a medium severity vulnerability due to the potential for sensitive information disclosure.
How do I fix CVE-2013-1728?
To fix CVE-2013-1728, update to Mozilla Firefox version 24.0, Thunderbird version 24.0, or SeaMonkey version 2.21 or later.
What software is affected by CVE-2013-1728?
CVE-2013-1728 affects Mozilla Firefox versions prior to 24.0, Thunderbird versions prior to 24.0, and SeaMonkey versions prior to 2.21.
What does CVE-2013-1728 exploit?
CVE-2013-1728 exploits improper memory initialization in the IonMonkey JavaScript engine when Valgrind mode is used.
Can I still use affected software if I have CVE-2013-1728?
Using affected software without applying the update poses a risk of sensitive information disclosure, so it is advisable to upgrade immediately.