CVE-2013-1694

Publication date 25 June 2013

Last updated 24 July 2024

Ubuntu priority

The PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly handle the lack of a wrapper, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by leveraging unintended clearing of the wrapper cache's preserved-wrapper flag.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
firefox	13.04 raring	Fixed 22.0+build1-0ubuntu0.13.04.1
	12.10 quantal	Fixed 22.0+build1-0ubuntu0.12.10.1
	12.04 LTS precise	Fixed 22.0+build1-0ubuntu0.12.04.1
	10.04 LTS lucid	Ignored end of life
seamonkey	13.04 raring	Not in release
	12.10 quantal	Not in release
	12.04 LTS precise	Not in release
	10.04 LTS lucid	Ignored end of life
thunderbird	13.04 raring	Fixed 17.0.7+build1-0ubuntu0.13.04.1
	12.10 quantal	Fixed 17.0.7+build1-0ubuntu0.12.10.1
	12.04 LTS precise	Fixed 17.0.7+build1-0ubuntu0.12.04.1
	10.04 LTS lucid	Ignored end of life
xulrunner-1.9.2	13.04 raring	Not in release
	12.10 quantal	Not in release
	12.04 LTS precise	Not in release
	10.04 LTS lucid	Ignored end of life

CVE-2013-1694

Status

References

Related Ubuntu Security Notices (USN)

Other references