Rapid7 Vulnerability & Exploit Database

USN-1924-1: Firefox vulnerabilities

Free InsightVM Trial No credit card necessary

Watch Demo See how it all works

Back to Search

USN-1924-1: Firefox vulnerabilities

Severity

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

08/06/2013

Created

07/25/2018

Added

04/08/2014

Modified

07/09/2020

Description

The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to execute arbitrary JavaScript code or conduct cross-site scripting (XSS) attacks via vectors related to Certificate Request Message Format (CRMF) request generation.

Solution(s)

ubuntu-upgrade-firefox

References

https://attackerkb.com/topics/cve-2013-1701
CVE - 2013-1701
CVE - 2013-1702
CVE - 2013-1704
CVE - 2013-1705
CVE - 2013-1708
CVE - 2013-1709
CVE - 2013-1710
CVE - 2013-1711
CVE - 2013-1713
CVE - 2013-1714
CVE - 2013-1717
DSA-2735
DSA-2746
OVAL18002
OVAL18367
OVAL18514
OVAL18531
OVAL18773
OVAL18803
OVAL18830
OVAL18876
OVAL18884
OVAL18935
OVAL18945
USN-1924-1

Advanced vulnerability management analytics and reporting.

Key Features

Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;