First published: Wed Dec 11 2013(Updated: )
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Credit: security@mozilla.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Firefox | <26.0 | |
Mozilla SeaMonkey | <2.23 | |
Oracle Solaris SPARC | =11.3 | |
Fedoraproject Fedora | =18 | |
Fedoraproject Fedora | =19 | |
Fedoraproject Fedora | =20 | |
Ubuntu Linux | =12.04 | |
Ubuntu Linux | =12.10 | |
Ubuntu Linux | =13.04 | |
Ubuntu Linux | =13.10 | |
openSUSE | =12.2 | |
openSUSE | =12.3 | |
openSUSE | =13.1 | |
SUSE Linux Enterprise Desktop with Beagle | =11-sp3 | |
SUSE Linux Enterprise Server | =11-sp3 | |
suse linux enterprise server vmware | =11-sp3 | |
SUSE Linux Enterprise Software Development Kit | =11-sp3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-5610 has a severity level that could allow remote attackers to cause a denial of service or potentially execute arbitrary code.
To address CVE-2013-5610, you should upgrade to Mozilla Firefox version 26.0 or later and SeaMonkey version 2.23 or later.
CVE-2013-5610 affects multiple versions of Mozilla Firefox prior to 26.0 and SeaMonkey prior to 2.23, as well as specific versions of Oracle Solaris and various Fedora and Ubuntu distributions.
Yes, CVE-2013-5610 can result in memory corruption that leads to application crashes.
Yes, CVE-2013-5610 poses a risk of arbitrary code execution due to the unspecified vulnerabilities in the browser engine.