First published: Wed Dec 11 2013(Updated: )
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Credit: security@mozilla.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Firefox | <26.0 | |
Mozilla Firefox ESR | >=24.0<24.2 | |
Mozilla SeaMonkey | <2.23 | |
Mozilla Thunderbird | <24.2 | |
Fedoraproject Fedora | =18 | |
Fedoraproject Fedora | =19 | |
Fedoraproject Fedora | =20 | |
SUSE Linux Enterprise Software Development Kit | =11.0-sp3 | |
openSUSE | =12.2 | |
openSUSE | =12.3 | |
openSUSE | =13.1 | |
SUSE Linux Enterprise Desktop | =11-sp3 | |
SUSE Linux Enterprise Server | =11-sp3 | |
SUSE Linux Enterprise Server | =11-sp3 | |
Ubuntu Linux | =12.04 | |
Ubuntu Linux | =12.10 | |
Ubuntu Linux | =13.04 | |
Ubuntu Linux | =13.10 | |
redhat enterprise Linux desktop | =5.0 | |
redhat enterprise Linux desktop | =6.0 | |
redhat enterprise Linux eus | =6.5 | |
redhat enterprise Linux server | =5.0 | |
redhat enterprise Linux server | =6.0 | |
redhat enterprise Linux server aus | =6.5 | |
redhat enterprise Linux server eus | =6.5 | |
redhat enterprise Linux server tus | =6.5 | |
redhat enterprise Linux workstation | =5.0 | |
redhat enterprise Linux workstation | =6.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-5609 is rated as a high severity vulnerability due to its potential to cause denial of service and arbitrary code execution.
To fix CVE-2013-5609, users should update to the latest version of Mozilla Firefox, Firefox ESR, Thunderbird, or SeaMonkey that address this vulnerability.
CVE-2013-5609 affects Mozilla Firefox before version 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23.
Yes, CVE-2013-5609 can potentially allow attackers to execute arbitrary code remotely.
Exploitation of CVE-2013-5609 may result in memory corruption, application crashes, and unexpected behavior in the affected applications.