Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (application crash) via a crafted WAV file that is not properly handled by the nsCString::CharAt function.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade thunderbirdUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade seamonkeyUpgrade firefox | Dec 10, 2025 | Aug 8, 2013 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Aug 6, 2013 |
| Mfsa2013 67 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 23.0 | Aug 7, 2013 | Aug 6, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.20.0 | Dec 8, 2014 | Aug 6, 2013 |
| Suse | — | Upgrade MozillaThunderbird-develUpgrade xulrunnerUpgrade mozilla-nss-certs-32bitUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-nssUpgrade seamonkey-venkmanUpgrade mozilla-nss-certsUpgrade seamonkeyUpgrade xulrunner-32bitUpgrade MozillaFirefox-translations-otherUpgrade libfreebl3Upgrade mozilla-nss-develUpgrade MozillaFirefox-develUpgrade MozillaThunderbird-buildsymbolsUpgrade mozilla-nss-32bitUpgrade seamonkey-translations-commonUpgrade mozilla-nss-toolsUpgrade MozillaThunderbirdUpgrade libsoftokn3Upgrade mozilla-nspr-32bitUpgrade mozilla-nss-sysinitUpgrade enigmailUpgrade mozilla-nsprUpgrade seamonkey-dom-inspectorUpgrade mozilla-nspr-develUpgrade MozillaFirefoxUpgrade libsoftokn3-32bitUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-jsUpgrade libfreebl3-32bitUpgrade xulrunner-develUpgrade mozilla-js-32bitUpgrade seamonkey-translations-otherUpgrade seamonkey-ircUpgrade MozillaFirefox-translations-commonUpgrade mozillafirefox-buildsymbolsUpgrade xulrunner-buildsymbolsUpgrade mozilla-nss-sysinit-32bitUpgrade mozillafirefox-branding-upstream | Feb 17, 2015 | Aug 6, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Aug 7, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub