- Firefox 26.0 的更新 (bnc#854367、bnc#854370)

- 重定基底修補程式

- 需要 NSPR 4.10.2 和 NSS 3.15.3.1

- MFSA 2013-104/CVE-2013-5609/CVE-2013-5610 其他記憶體安全危險

- MFSA 2013-105/CVE-2013-5611 (bmo#771294) 應用程式安裝門鉤存在於導覽上

- MFSA 2013-106/CVE-2013-5612 (bmo#871161) 字元編碼跨來源 XSS 攻擊

- MFSA 2013-107/CVE-2013-5614 (bmo#886262) 沙箱限制未套用至巢狀物件元素

- MFSA 2013-108/CVE-2013-5616 (bmo#938341) 事件接聽程式中的釋放後使用

- MFSA 2013-109/CVE-2013-5618 (bmo#926361) 表格編輯期間出現釋放後使用

- MFSA 2013-110/CVE-2013-5619 (bmo#917841) JavaScript 二進位搜尋演算法中有潛在溢位

- MFSA 2013-111/CVE-2013-6671 (bmo#930281) 取代指定清單元素時發生分割違規

- MFSA 2013-112/CVE-2013-6672 (bmo#894736) 透過選取貼上造成 Linux 剪貼簿資訊洩漏

- MFSA 2013-113/CVE-2013-6673 (bmo#970380) EV 憑證驗證期間忽略內建 root 的信任設定

- MFSA 2013-114/CVE-2013-5613 (bmo#930381、bmo#932449) 合成滑鼠移動中有釋放後使用錯誤

- MFSA 2013-115/CVE-2013-5615 (bmo#929261) GetElementIC 輸入的陣列虛設常式可在觀察到的排版之外產生

- MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693) JPEG 資訊洩漏

- MFSA 2013-117 (bmo#946351) 錯誤核發 ANSSI/DCSSI 憑證 (已透過 NSS 3.15.3.1 修正)

- 現在依預設啟用 GStreamer 時，移除了 gecko.js 喜好設定檔案

安裝的 Firefox 版本比 26.0 舊，因此可能會受到多個弱點影響：

- 瀏覽器引擎中存有記憶體問題，可導致拒絕服務或任意程式碼執行。(CVE-2013-5609、CVE-2013-5610)

- 存在 Web 應用程式安裝通知會從一個網站顯示到其他網站的問題。惡意的網站可利用此問題，誘騙使用者從某個網站安裝應用程式，同時使它看起來像是來自另一個網站。(CVE-2013-5611)

- 跨網站指令碼篩選規避問題，可能是因為目前的網站遺漏字元組編碼時，系統從之前造訪過的網站繼承字元編碼所導致。(CVE-2013-5612)

- 用於處理綜合滑鼠移動的函式中存在兩個釋放後使用弱點。
 (CVE-2013-5613)

- 因為 'iframe sandbox' 限制沒有正確套用至沙箱 iframe 中的 'object' 元素，故沙箱限制可能遭繞過。(CVE-2013-5614)

- 存在 'GetElementIC' 型別陣列虛設常式可在觀察到的排版之外產生的問題。這可導致出現無法預測的行為，帶來潛在的安全性影響。(CVE-2013-5615)

- 與來自 mListeners 陣列的事件接聽程式互動時，存在釋放後使用弱點。這可導致拒絕服務或是任意程式碼執行。(CVE-2013-5616)

- 在記憶體回收期間，編輯器的表格編輯使用者介面存在釋放後使用弱點。這可導致拒絕服務或是任意程式碼執行。(CVE-2013-5618)

- SpiderMonkey JavaScript 引擎的二進位搜尋演算法中存在記憶體問題，可造成拒絕服務或任意程式碼執行。
 (CVE-2013-5619)

- 'libjpeg' 程式庫中，處理具有 Start Of Scan (SOS) 和 Define Huffman Table (DHT) 標記的 JPEG 格式影像時存在問題。這可允許攻擊者讀取任意記憶體內容，以及竊取跨網域影像。(CVE-2013-6629、CVE-2013-6630)

- 透過指令碼在文件中插入指定的清單時存在記憶體問題，可造成拒絕服務或任意程式碼執行。
 (CVE-2013-6671)

- 延伸驗證 (EV) 憑證驗證期間，內建 root 憑證的信任設定遭到忽略。這會導致使用者無法明確不信任來自特定憑證授權單位的 root 憑證。(CVE-2013-6673)

- Mozilla 的 root 憑證授權單位中存在攔截式 (MITM) 流量管理裝置所使用的中繼憑證。據回報，此憑證遭到誤用。

更新至 Firefox 26。

請注意，Tenable Network Security 已直接從 Fedora 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

Ben Turner、Bobby Holley、Jesse Ruderman、Christian Holler 和 Christoph Diehl 發現 Firefox 中有多個記憶體安全性問題。
如果使用者遭到誘騙而開啟特製網站，攻擊者可能加以惡意利用，透過損毀應用程式來引發拒絕服務，或以叫用 Firefox 的使用者權限執行任意程式碼。(CVE-2013-5609、CVE-2013-5610)

Myk Melez 發現，頁面導覽之間會持續出現 Web 應用程式安裝的門鉤通知。攻擊者可能惡意利用此瑕疵發動點擊劫持攻擊。
(CVE-2013-5611)

Masato Kinugawa 發現，缺少字元集編碼資訊的頁面可繼承來自其他網域的跨導覽字元編碼。攻擊者可能惡意利用此弱點來進行跨網站指令碼攻擊。(CVE-2013-5612)

Daniel Veditz 發現，沙箱化 iframe 可使用物件元素繞過本身的限制。(CVE-2013-5614)

Tyson Smith 和 Jesse Schwartzentruber 發現事件接聽程式中有釋放後使用錯誤。攻擊者可能加以惡意利用，藉由損毀應用程式引發拒絕服務，或以叫用 Firefox 的使用者權限執行任意程式碼。(CVE-2013-5616)

在表格編輯介面中發現釋放後使用錯誤。攻擊者可能加以惡意利用，藉由損毀應用程式引發拒絕服務，或以叫用 Firefox 的使用者權限執行任意程式碼。(CVE-2013-5618)

Dan Gohman 發現，Spidermonkey 的二進位搜尋演算法所用的算術有多處容易發生溢位問題。不過，一般認為這個問題不會遭到惡意利用。(CVE-2013-5619)

Tyson Smith 和 Jesse Schwartzentruber 發現，使用指令碼在文件中插入指定的清單時會當機。攻擊者可能利用此弱點，以叫用 Firefox 之使用者的權限執行任意程式碼。(CVE-2013-6671)

Vincent Lefevre 發現，Web 內容在某些情況下可存取剪貼簿的資料，其可導致資訊洩漏。
(CVE-2013-6672)

Sijie Xia 發現，內建 EV root 憑證的信任設定在特定情況下會遭到忽略，導致使用者無法手動不信任來自特定授權單位的憑證。(CVE-2013-6673)

Tyson Smith、Jesse Schwartzentruber 和 Atte Kettunen 發現，綜合滑鼠移動處理的函式中出現釋放後使用錯誤。攻擊者可能加以惡意利用，藉由損毀應用程式引發拒絕服務，或以叫用 Firefox 的使用者權限執行任意程式碼。(CVE-2013-5613)

Eric Faust 發現，GetElementIC 型別陣列虛設常式可在觀察到的排版之外產生。攻擊者便可能加以惡意利用，造成伴隨潛在安全性影響的未定義行為。(CVE-2013-5615)

Michal Zalewski 發現 JPEG 影像處理存在數個問題。攻擊者可能惡意利用這些問題以取得敏感資訊。(CVE-2013-6629、CVE-2013-6630)。

Mozilla Firefox 已更新至 24.2.0 ESR 安全性版本。

這是來自 17 ESR 版本分支的主要升級。

修正的安全性問題：

- 應用程式彈窗存在於導覽上。(MFSA 2013-105)。(CVE-2013-5611)

- 其他記憶體安全性危險 (rv:24.2)。(MFSA 2013-104)。(CVE-2013-5609)

- 其他記憶體安全性危險 (rv:26.0)。(MFSA 2013-104)。(CVE-2013-5610)

- 字元編碼跨來源 XSS 攻擊。(MFSA 2013-106)。(CVE-2013-5612)

- 沙箱限制沒有套用至巢狀物件元素。(MFSA 2013-107)。(CVE-2013-5614)

- 事件接聽程式中有釋放後使用錯誤。(MFSA 2013-108)。
 (CVE-2013-5616)

- JavaScript 二進位搜尋演算法中有潛在溢位。(MFSA 2013-110)。(CVE-2013-5619)

- 取代指定清單元素時發生分割違規。(MFSA 2013-111)。(CVE-2013-6671)

- EV 憑證驗證期間，內建 root 的信任設定遭忽略。(MFSA 2013-113)。(CVE-2013-6673)

- 合成滑鼠移動中有釋放後使用錯誤。(MFSA 2013-114)。(CVE-2013-5613)

- GetElementIC 型別陣列虛設常式可在觀察到的排版之外產生。(MFSA 2013-115)。(CVE-2013-5615)

- 透過選取貼上造成 Linux 剪貼簿資訊洩漏。(MFSA 2013-112)。(CVE-2013-6672)

- 表格編輯期間出現釋放後使用錯誤 (MFSA 2013-109)。
 (CVE-2013-5618)

Versions of Mozilla Firefox ESR prior to 24.2 are prone to the following vulnerabilities :

 - Miscellaneous memory safety hazards (CVE-2013-5609, CVE-2013-5610)
 - Application Installation doorhanger does not get properly dismissed, which can be leveraged to trick a user into installing an application from one site while thinking it originated from another (CVE-2013-5611)
 - Potential XSS vulnerability via cross-domain inheritance of charset (CVE-2013-5612)
 - Sandbox restrictions are not properly applied to nested object elements, which could be leveraged to bypass restrictions (CVE-2013-5614)
 - Use-after-free in event listeners, table editing user interface, synthetic mouse movement can lead to a potentially exploitable crash (CVE-2013-5616, CVE-2013-5613, CVE-2013-5618)
 - Binary search algorithms in the Javascript engine contain potential out-of-bounds array access, though these are not directly exploitable (CVE-2013-5619)
 - Segmentation violation when replacing ordered list elements in a document via script can lead to a potentially exploitable crash (CVE-2013-6671)
 - On Linux systems, clipboard content may be made accessible to web content when a user pastes a selection with a middle-click, which can lead to information disclosure (CVE-2013-6672)
 - Extended validation root certificates remain trusted even if the user has explicitly removes the trust. (CVE-2013-6673)
 - GetElementIC typed arrays can be generated outside observed typesets, with unknown security impact (CVE-2013-5615)
 - Issues in the JPEG image processing library can allow arbitrary memory to be read, as well as cross-domain theft (CVE-2013-6629, CVE-2013-6630)
 - An intermediary CA that is chained up to a root within Mozilla's root store was revoked for supplying an intermediate certificate that allowed a man-in-the-middle proxy to perform traffic management of domain names and IP addresses the certificate holder did not own or control.

Versions of Mozilla Thunderbird prior to 24.2 are prone to the following vulnerabilities :

 - Miscellaneous memory safety hazards (CVE-2013-5609, CVE-2013-5610)
 - Use-after-free in event listeners, table editing user interface, synthetic mouse movement can lead to a potentially exploitable crash (CVE-2013-5616, CVE-2013-5613, CVE-2013-5618)
 - Segmentation violation when replacing ordered list elements in a document via script can lead to a potentially exploitable crash (CVE-2013-6671)
 - Extended validation root certificates remain trusted even if the user has explicitly removes the trust. (CVE-2013-6673)
 - GetElementIC typed arrays can be generated outside observed typesets, with unknown security impact (CVE-2013-5615)
 - Issues in the JPEG image processing library can allow arbitrary memory to be read, as well as cross-domain theft (CVE-2013-6629, CVE-2013-6630)
 - An intermediary CA that is chained up to a root within Mozilla's root store was revoked for supplying an intermediate certificate that allowed a man-in-the-middle proxy to perform traffic management of domain names and IP addresses the certificate holder did not own or control.

Versions of Mozilla Firefox earlier than 26.0 are prone to the following vulnerabilities :

 - Miscellaneous memory safety hazards (CVE-2013-5609, CVE-2013-5610)
 - Application Installation doorhanger does not get properly dismissed, which can be leveraged to trick a user into installing an application from one site while thinking it originated from another (CVE-2013-5611)
 - Potential XSS vulnerability via cross-domain inheritance of charset (CVE-2013-5612)
 - Sandbox restrictions are not properly applied to nested object elements, which could be leveraged to bypass restrictions (CVE-2013-5614)
 - Use-after-free in event listeners, table editing user interface, synthetic mouse movement can lead to a potentially exploitable crash (CVE-2013-5616, CVE-2013-5613, CVE-2013-5618)
 - Binary search algorithms in the Javascript engine contain potential out-of-bounds array access, though these are not directly exploitable (CVE-2013-5619)
 - Segmentation violation when replacing ordered list elements in a document via script can lead to a potentially exploitable crash (CVE-2013-6671)
 - On Linux systems, clipboard content may be made accessible to web content when a user pastes a selection with a middle-click, which can lead to information disclosure (CVE-2013-6672)
 - Extended validation root certificates remain trusted even if the user has explicitly removes the trust. (CVE-2013-6673)
 - GetElementIC typed arrays can be generated outside observed typesets, with unknown security impact (CVE-2013-5615)
 - Issues in the JPEG image processing library can allow arbitrary memory to be read, as well as cross-domain theft (CVE-2013-6629, CVE-2013-6630)
 - An intermediary CA that is chained up to a root within Mozilla's root store was revoked for supplying an intermediate certificate that allowed a man-in-the-middle proxy to perform traffic management of domain names and IP addresses the certificate holder did not own or control.

Versions of SeaMonkey earlier than 2.23 are prone to the following vulnerabilities:

  - Miscellaneous memory safety hazards (CVE-2013-5609, CVE-2013-5610)

  - Potential XSS vulnerability via cross-domain inheritance of charset (CVE-2013-5612)

  - Sandbox restrictions are not properly applied to nested object elements, which could be leveraged to bypass restrictions (CVE-2013-5614)

  - Use-after-free in event listeners, table editing user interface, synthetic mouse movement can lead to a potentially exploitable crash (CVE-2013-5616, CVE-2013-5613, CVE-2013-5618)

  - Binary search algorithms in the Javascript engine are contain potential out-of-bounds array access, though these are not directly exploitable (CVE-2013-5619)

  - Segmentation violation when replacing ordered list elements in a document via script can lead to a potentially exploitable crash (CVE-2013-6671)

  - On Linux systems, clipboard content may be made accessible to web content when a user pastes a selection with a middle-click, which can lead to information disclosure (CVE-2013-6672)

  - Extended validation root certificates remain trusted even if the user has explicitly removes the trust. (CVE-2013-6673)

  - GetElementIC typed arrays can be generated outside observed typesets, with unknown security impact (CVE-2013-5615)

  - Issues in the JPEG image processing library can allow arbitrary memory to be read, as well as cross-domain theft (CVE-2013-6629, CVE-2013-6630)

  - An intermediary CA that is chained up to a root within Mozilla's root store was revoked for supplying an intermediate certificate that allowed a man-in-the-middle proxy to perform traffic management of domain names and IP addresses the certificate holder did not own or control.

ID	Name	Product	Family	Published	Updated	Severity
75241	openSUSE 安全性更新：MozillaFirefox (openSUSE-SU-2013:1918-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/19/2021	critical
71344	Firefox < 26.0 多個弱點 (Mac OS X)	Nessus	MacOS X Local Security Checks	12/11/2013	11/27/2019	critical
71365	Fedora 19 : firefox-26.0-2.fc19 / xulrunner-26.0-1.fc19 (2013-23127)	Nessus	Fedora Local Security Checks	12/12/2013	1/11/2021	critical
71374	Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10：firefox 弱點 (USN-2052-1)	Nessus	Ubuntu Local Security Checks	12/12/2013	9/19/2019	critical
71559	SuSE 11.3 安全性更新：Mozilla Firefox (SAT 修補程式編號 8657)	Nessus	SuSE Local Security Checks	12/20/2013	1/19/2021	critical
71560	SuSE 11.3 安全性更新：Mozilla Firefox (SAT 修補程式編號 8657)	Nessus	SuSE Local Security Checks	12/20/2013	1/19/2021	critical
701241	Mozilla Firefox ESR < 24.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	11/6/2019	11/6/2019	critical
8071	Mozilla Thunderbird < 24.2 Multiple Vulnerabilities	Nessus Network Monitor	SMTP Clients	12/16/2013	3/6/2019	critical
8070	Mozilla Firefox < 26.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	12/16/2013	11/6/2019	critical
8072	SeaMonkey < 2.23 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	12/16/2013	3/6/2019	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical