10 - RHSA-2013:0820

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	firefox security update

Informations
Name	RHSA-2013:0820	First vendor Publication	2013-05-14
Vendor	RedHat	Last vendor Modification	2013-05-14
Severity (Vendor)	Critical	Revision	01

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Problem Description:

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

2. Relevant releases/architectures:

RHEL Desktop Workstation (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64

3. Description:

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox.

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2013-0801, CVE-2013-1674, CVE-2013-1675, CVE-2013-1676, CVE-2013-1677, CVE-2013-1678, CVE-2013-1679, CVE-2013-1680, CVE-2013-1681)

A flaw was found in the way Firefox handled Content Level Constructors. A malicious site could use this flaw to perform cross-site scripting (XSS) attacks. (CVE-2013-1670)

Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Christoph Diehl, Christian Holler, Jesse Ruderman, Timothy Nikkel, Jeff Walden, Nils, Ms2ger, Abhishek Arya, and Cody Crews as the original reporters of these issues.

For technical details regarding these flaws, refer to the Mozilla security advisories for Firefox 17.0.6 ESR. You can find a link to the Mozilla advisories in the References section of this erratum.

All Firefox users should upgrade to these updated packages, which contain Firefox version 17.0.6 ESR, which corrects these issues. After installing the update, Firefox must be restarted for the changes to take effect.

4. Solution:

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258

5. Bugs fixed (http://bugzilla.redhat.com/):

962591 - CVE-2013-0801 Mozilla: Miscellaneous memory safety hazards (rv:17.0.6) (MFSA 2013-41) 962596 - CVE-2013-1670 Mozilla: Privileged access for content level constructor (MFSA 2013-42) 962598 - CVE-2013-1674 Mozilla: Use-after-free with video and onresize event (MFSA 2013-46) 962601 - CVE-2013-1675 Mozilla: Uninitialized functions in DOMSVGZoomEvent (MFSA 2013-47) 962603 - CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48)

Original Source

Url : https://rhn.redhat.com/errata/RHSA-2013-0820.html

CWE : Common Weakness Enumeration

%	Id	Name
40 %	CWE-399	Resource Management Errors
40 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer
10 %	CWE-264	Permissions, Privileges, and Access Controls
10 %	CWE-79	Failure to Preserve Web Page Structure ('Cross-site Scripting') (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:16577

Oval ID:	oval:org.mitre.oval:def:16577
Title:	The _cairo_xlib_surface_add_glyph function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (invalid write operation) via unspecified vectors.
Description:	The _cairo_xlib_surface_add_glyph function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (invalid write operation) via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1678	Version:	16
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla Firefox ESR Mozilla Thunderbird ESR
Definition Synopsis:
Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Determine if the version of Mozilla Thunderbird is less than or equal to 17.0.5 AND Determine if the version of Mozilla Thunderbird is greater than or equal to 17.0 AND Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Mozilla Firefox Mainline version is greater than or equal to 19.0 AND Mozilla Firefox Mainline version is less than 21.0 OR Check for vulnerable Mozilla Firefox ESR Mozilla Firefox ESR is installed AND Mozilla Firefox ESR version is less than 17.0.6 and greater than or equal to 17.x OR Check for vulnerable Mozilla Thunderbird ESR Mozilla Thunderbird ESR is installed AND Mozilla Thunderbird ESR version is less than 17.0.6 and greater than or equal to 17.x

Definition Id: oval:org.mitre.oval:def:16956

Oval ID:	oval:org.mitre.oval:def:16956
Title:	The SelectionIterator::GetNextSegment function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
Description:	The SelectionIterator::GetNextSegment function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1676	Version:	17
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla Firefox ESR Mozilla Thunderbird ESR
Definition Synopsis:
Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Determine if the version of Mozilla Thunderbird is less than or equal to 17.0.5 AND Determine if the version of Mozilla Thunderbird is greater than or equal to 17.0 AND Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Mozilla Firefox Mainline version is greater than or equal to 19.0 AND Mozilla Firefox Mainline version is less than 21.0 OR Check for vulnerable Mozilla Firefox ESR Mozilla Firefox ESR is installed AND Mozilla Firefox ESR version is less than 17.0.6 and greater than or equal to 17.x OR Check for vulnerable Mozilla Thunderbird ESR Mozilla Thunderbird ESR is installed AND Mozilla Thunderbird ESR version is less than 17.0.6 and greater than or equal to 17.x

Definition Id: oval:org.mitre.oval:def:16976

Oval ID:	oval:org.mitre.oval:def:16976
Title:	Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent sensitive information from process memory via a crafted web site.
Description:	Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1675	Version:	17
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla Firefox ESR Mozilla Thunderbird ESR
Definition Synopsis:
Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Determine if the version of Mozilla Thunderbird is less than or equal to 17.0.5 AND Determine if the version of Mozilla Thunderbird is greater than or equal to 17.0 AND Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Mozilla Firefox Mainline version is greater than or equal to 19.0 AND Mozilla Firefox Mainline version is less than 21.0 OR Check for vulnerable Mozilla Firefox ESR Mozilla Firefox ESR is installed AND Mozilla Firefox ESR version is less than 17.0.6 and greater than or equal to 17.x OR Check for vulnerable Mozilla Thunderbird ESR Mozilla Thunderbird ESR is installed AND Mozilla Thunderbird ESR version is less than 17.0.6 and greater than or equal to 17.x

Definition Id: oval:org.mitre.oval:def:16979

Oval ID:	oval:org.mitre.oval:def:16979
Title:	The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
Description:	The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1677	Version:	17
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla Firefox ESR Mozilla Thunderbird ESR
Definition Synopsis:
Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Determine if the version of Mozilla Thunderbird is less than or equal to 17.0.5 AND Determine if the version of Mozilla Thunderbird is greater than or equal to 17.0 AND Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Mozilla Firefox Mainline version is greater than or equal to 19.0 AND Mozilla Firefox Mainline version is less than 21.0 OR Check for vulnerable Mozilla Firefox ESR Mozilla Firefox ESR is installed AND Mozilla Firefox ESR version is less than 17.0.6 and greater than or equal to 17.x OR Check for vulnerable Mozilla Thunderbird ESR Mozilla Thunderbird ESR is installed AND Mozilla Thunderbird ESR version is less than 17.0.6 and greater than or equal to 17.x

Definition Id: oval:org.mitre.oval:def:16988

Oval ID:	oval:org.mitre.oval:def:16988
Title:	Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Description:	Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1681	Version:	17
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla Firefox ESR Mozilla Thunderbird ESR
Definition Synopsis:
Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Determine if the version of Mozilla Thunderbird is less than or equal to 17.0.5 AND Determine if the version of Mozilla Thunderbird is greater than or equal to 17.0 AND Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Mozilla Firefox Mainline version is greater than or equal to 19.0 AND Mozilla Firefox Mainline version is less than 21.0 OR Check for vulnerable Mozilla Firefox ESR Mozilla Firefox ESR is installed AND Mozilla Firefox ESR version is less than 17.0.6 and greater than or equal to 17.x OR Check for vulnerable Mozilla Thunderbird ESR Mozilla Thunderbird ESR is installed AND Mozilla Thunderbird ESR version is less than 17.0.6 and greater than or equal to 17.x

Definition Id: oval:org.mitre.oval:def:17031

Oval ID:	oval:org.mitre.oval:def:17031
Title:	Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Description:	Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1680	Version:	17
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla Firefox ESR Mozilla Thunderbird ESR
Definition Synopsis:
Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Determine if the version of Mozilla Thunderbird is less than or equal to 17.0.5 AND Determine if the version of Mozilla Thunderbird is greater than or equal to 17.0 AND Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Mozilla Firefox Mainline version is greater than or equal to 19.0 AND Mozilla Firefox Mainline version is less than 21.0 OR Check for vulnerable Mozilla Firefox ESR Mozilla Firefox ESR is installed AND Mozilla Firefox ESR version is less than 17.0.6 and greater than or equal to 17.x OR Check for vulnerable Mozilla Thunderbird ESR Mozilla Thunderbird ESR is installed AND Mozilla Thunderbird ESR version is less than 17.0.6 and greater than or equal to 17.x

Definition Id: oval:org.mitre.oval:def:17046

Oval ID:	oval:org.mitre.oval:def:17046
Title:	The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.
Description:	The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1670	Version:	16
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla Firefox ESR Mozilla Thunderbird ESR
Definition Synopsis:
Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Determine if the version of Mozilla Thunderbird is less than or equal to 17.0.5 AND Determine if the version of Mozilla Thunderbird is greater than or equal to 17.0 AND Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Mozilla Firefox Mainline version is greater than or equal to 19.0 AND Mozilla Firefox Mainline version is less than 21.0 OR Check for vulnerable Mozilla Firefox ESR Mozilla Firefox ESR is installed AND Mozilla Firefox ESR version is less than 17.0.6 and greater than or equal to 17.x OR Check for vulnerable Mozilla Thunderbird ESR Mozilla Thunderbird ESR is installed AND Mozilla Thunderbird ESR version is less than 17.0.6 and greater than or equal to 17.x

Definition Id: oval:org.mitre.oval:def:17062

Oval ID:	oval:org.mitre.oval:def:17062
Title:	Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to execute arbitrary code via crafted values that trigger attempted use of a (1) negative box boundary or (2) negative box size, leading to an out-of-bounds write operation.
Description:	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-0801	Version:	23
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey Mozilla Firefox ESR Mozilla Thunderbird ESR
Definition Synopsis:
Check for vulnerable Seamonkey Mozilla Seamonkey is installed AND Determine if the version of Mozilla Seamonkey is less than 2.17 AND Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Determine if the version of Mozilla Thunderbird is less than or equal to 17.0.5 AND Determine if the version of Mozilla Thunderbird is greater than or equal to 17.0 AND Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Mozilla Firefox Mainline version is greater than or equal to 19.0 AND Mozilla Firefox Mainline version is less than 21.0 OR Check for vulnerable Mozilla Firefox ESR Mozilla Firefox ESR is installed AND Mozilla Firefox ESR version is less than 17.0.5 and greater than or equal to 17.x OR Check for vulnerable Mozilla Thunderbird ESR Mozilla Thunderbird ESR is installed AND Mozilla Thunderbird ESR version is less than 17.0.5 and greater than or equal to 17.x

Definition Id: oval:org.mitre.oval:def:17085

Oval ID:	oval:org.mitre.oval:def:17085
Title:	Use-after-free vulnerability in the mozilla::plugins::child::_geturlnotify function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Description:	Use-after-free vulnerability in the mozilla::plugins::child::_geturlnotify function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1679	Version:	17
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla Firefox ESR Mozilla Thunderbird ESR
Definition Synopsis:
Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Determine if the version of Mozilla Thunderbird is less than or equal to 17.0.5 AND Determine if the version of Mozilla Thunderbird is greater than or equal to 17.0 AND Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Mozilla Firefox Mainline version is greater than or equal to 19.0 AND Mozilla Firefox Mainline version is less than 21.0 OR Check for vulnerable Mozilla Firefox ESR Mozilla Firefox ESR is installed AND Mozilla Firefox ESR version is less than 17.0.6 and greater than or equal to 17.x OR Check for vulnerable Mozilla Thunderbird ESR Mozilla Thunderbird ESR is installed AND Mozilla Thunderbird ESR version is less than 17.0.6 and greater than or equal to 17.x

Definition Id: oval:org.mitre.oval:def:17093

Oval ID:	oval:org.mitre.oval:def:17093
Title:	USN-1822-1 -- Firefox vulnerabilities
Description:	Firefox could be made to crash or run programs as your login if it opened a malicious website.
Family:	unix	Class:	patch
Reference(s):	usn-1822-1 CVE-2013-0801 CVE-2013-1669 CVE-2013-1670 CVE-2013-1671 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681	Version:	7
Platform(s):	Ubuntu 13.04 Ubuntu 12.04 Ubuntu 12.10	Product(s):	firefox
Definition Synopsis:
Release section Ubuntu 12.10 is installed AND Installed architecture is all AND firefox DPKG is earlier than 21.0+build2-0ubuntu0.12.10.2 OR Release section Ubuntu 12.04 is installed AND Installed architecture is all AND firefox DPKG is earlier than 21.0+build2-0ubuntu0.12.04.3 OR Release section Ubuntu 13.04 is installed AND Installed architecture is all AND firefox DPKG is earlier than 21.0+build2-0ubuntu0.13.04.2

Definition Id: oval:org.mitre.oval:def:17147

Oval ID:	oval:org.mitre.oval:def:17147
Title:	Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code via vectors involving an onresize event during the playing of a video.
Description:	Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code via vectors involving an onresize event during the playing of a video.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1674	Version:	16
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla Firefox ESR Mozilla Thunderbird ESR
Definition Synopsis:
Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Determine if the version of Mozilla Thunderbird is less than or equal to 17.0.5 AND Determine if the version of Mozilla Thunderbird is greater than or equal to 17.0 AND Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Mozilla Firefox Mainline version is greater than or equal to 19.0 AND Mozilla Firefox Mainline version is less than 21.0 OR Check for vulnerable Mozilla Firefox ESR Mozilla Firefox ESR is installed AND Mozilla Firefox ESR version is less than 17.0.6 and greater than or equal to 17.x OR Check for vulnerable Mozilla Thunderbird ESR Mozilla Thunderbird ESR is installed AND Mozilla Thunderbird ESR version is less than 17.0.6 and greater than or equal to 17.x

Definition Id: oval:org.mitre.oval:def:17825

Oval ID:	oval:org.mitre.oval:def:17825
Title:	DSA-2699-1 iceweasel - several
Description:	Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors, missing input sanitising vulnerabilities, use-after-free vulnerabilities, buffer overflows and other programming errors may lead to the execution of arbitrary code, privilege escalation, information leaks or cross-site-scripting.
Family:	unix	Class:	patch
Reference(s):	DSA-2699-1 CVE-2013-0773 CVE-2013-0775 CVE-2013-0776 CVE-2013-0780 CVE-2013-0782 CVE-2013-0783 CVE-2013-0787 CVE-2013-0788 CVE-2013-0793 CVE-2013-0795 CVE-2013-0796 CVE-2013-0800 CVE-2013-0801 CVE-2013-1670 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681	Version:	8
Platform(s):	Debian GNU/Linux 7 Debian GNU/kFreeBSD 7	Product(s):	iceweasel
Definition Synopsis:
Debian 7 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND iceweasel DPKG is earlier than 17.0.6esr-1~deb7u1

Definition Id: oval:org.mitre.oval:def:18282

Oval ID:	oval:org.mitre.oval:def:18282
Title:	USN-1823-1 -- thunderbird vulnerabilities
Description:	Several security issues were fixed in Thunderbird.
Family:	unix	Class:	patch
Reference(s):	USN-1823-1 CVE-2013-0801 CVE-2013-1669 CVE-2013-1670 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681	Version:	7
Platform(s):	Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04	Product(s):	thunderbird
Definition Synopsis:
Release section Ubuntu 13.04 is installed AND thunderbird DPKG is earlier than 17.0.6+build1-0ubuntu0.13.04.1 AND Release section Ubuntu 12.10 is installed AND thunderbird DPKG is earlier than 17.0.6+build1-0ubuntu0.12.10.1 AND Release section Ubuntu 12.04 is installed AND thunderbird DPKG is earlier than 17.0.6+build1-0ubuntu0.12.04.1

Definition Id: oval:org.mitre.oval:def:21038

Oval ID:	oval:org.mitre.oval:def:21038
Title:	RHSA-2013:0821: thunderbird security update (Important)
Description:	Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0821-01 CESA-2013:0821 CVE-2013-0801 CVE-2013-1670 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681	Version:	143
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 CentOS Linux 5 CentOS Linux 6	Product(s):	thunderbird
Definition Synopsis:
Redhat 6 section thunderbird is earlier than 0:17.0.6-2.el6_4 AND The operating system installed on the system is Red Hat Enterprise Linux 6 OR Centos 6 section thunderbird is earlier than 0:17.0.6-2.el6.centos AND CentOS Linux 6.x OR Redhat 5 section The operating system installed on the system is Red Hat Enterprise Linux 5 AND thunderbird is earlier than 0:17.0.6-1.el5_9 OR Centos 5 section CentOS Linux 5.x AND thunderbird is earlier than 0:17.0.6-1.el5.centos

Definition Id: oval:org.mitre.oval:def:21139

Oval ID:	oval:org.mitre.oval:def:21139
Title:	RHSA-2013:0820: firefox security update (Critical)
Description:	Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0820-01 CESA-2013:0820 CVE-2013-0801 CVE-2013-1670 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681	Version:	143
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 CentOS Linux 5 CentOS Linux 6	Product(s):	firefox xulrunner
Definition Synopsis:
Redhat 6 section The operating system installed on the system is Red Hat Enterprise Linux 6 AND Packages section firefox is earlier than 0:17.0.6-1.el6_4 AND xulrunner-devel is earlier than 0:17.0.6-2.el6_4 AND xulrunner is earlier than 0:17.0.6-2.el6_4 OR Centos 6 section CentOS Linux 6.x AND Packages section firefox is earlier than 0:17.0.6-1.el6.centos AND xulrunner-devel is earlier than 0:17.0.6-2.el6.centos AND xulrunner is earlier than 0:17.0.6-2.el6.centos OR Redhat 5 and Centos 5 section Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Packages section xulrunner-devel is earlier than 0:17.0.6-1.el5_9 AND xulrunner is earlier than 0:17.0.6-1.el5_9 OR Centos 5 section CentOS Linux 5.x AND firefox is earlier than 0:17.0.6-1.el5.centos OR Redhat 5 section The operating system installed on the system is Red Hat Enterprise Linux 5 AND firefox is earlier than 0:17.0.6-1.el5_9

Definition Id: oval:org.mitre.oval:def:22889

Oval ID:	oval:org.mitre.oval:def:22889
Title:	DEPRECATED: ELSA-2013:0821: thunderbird security update (Important)
Description:	Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0821-01 CVE-2013-0801 CVE-2013-1670 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681	Version:	46
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	thunderbird
Definition Synopsis:
rpm test thunderbird is earlier than 0:17.0.6-2.el6_4 AND Oracle Linux 6.x OR rpm test Oracle Linux 5.x AND thunderbird is earlier than 0:17.0.6-1.el5_9

Definition Id: oval:org.mitre.oval:def:22971

Oval ID:	oval:org.mitre.oval:def:22971
Title:	DEPRECATED: ELSA-2013:0820: firefox security update (Critical)
Description:	Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0820-01 CVE-2013-0801 CVE-2013-1670 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681	Version:	46
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	firefox xulrunner
Definition Synopsis:
rpm test Oracle Linux 6.x AND rpm test firefox is earlier than 0:17.0.6-1.el6_4 AND xulrunner-devel is earlier than 0:17.0.6-2.el6_4 AND xulrunner is earlier than 0:17.0.6-2.el6_4 OR rpm test Oracle Linux 5.x AND rpm test xulrunner-devel is earlier than 0:17.0.6-1.el5_9 AND xulrunner is earlier than 0:17.0.6-1.el5_9 AND firefox is earlier than 0:17.0.6-1.el5_9

Definition Id: oval:org.mitre.oval:def:23946

Oval ID:	oval:org.mitre.oval:def:23946
Title:	ELSA-2013:0821: thunderbird security update (Important)
Description:	Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0821-01 CVE-2013-0801 CVE-2013-1670 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681	Version:	45
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	thunderbird
Definition Synopsis:
rpm test thunderbird is earlier than 0:17.0.6-2.el6_4 AND Oracle Linux 6.x OR rpm test Oracle Linux 5.x AND thunderbird is earlier than 0:17.0.6-1.el5_9

Definition Id: oval:org.mitre.oval:def:24014

Oval ID:	oval:org.mitre.oval:def:24014
Title:	ELSA-2013:0820: firefox security update (Critical)
Description:	Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0820-01 CVE-2013-0801 CVE-2013-1670 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681	Version:	45
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	firefox xulrunner
Definition Synopsis:
rpm test Oracle Linux 6.x AND rpm test firefox is earlier than 0:17.0.6-1.el6_4 AND xulrunner-devel is earlier than 0:17.0.6-2.el6_4 AND xulrunner is earlier than 0:17.0.6-2.el6_4 OR rpm test Oracle Linux 5.x AND rpm test xulrunner-devel is earlier than 0:17.0.6-1.el5_9 AND xulrunner is earlier than 0:17.0.6-1.el5_9 AND firefox is earlier than 0:17.0.6-1.el5_9

Definition Id: oval:org.mitre.oval:def:26956

Oval ID:	oval:org.mitre.oval:def:26956
Title:	DEPRECATED: ELSA-2013-0820 -- firefox security update (critical)
Description:	firefox [17.0.6-1.0.1.el6_4] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones [17.0.6-1] - Update to 17.0.6 ESR [17.0.5-2] - Updated XulRunner check xulrunner [17.0.6-2.0.1.el6_4] - Replaced xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js - Removed XULRUNNER_VERSION from SOURCE21 [17.0.6-2] - Update to 17.0.6 ESR [17.0.5-2] - Updated nss and nspr versions
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-0820 CVE-2013-0801 CVE-2013-1670 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681	Version:	4
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	firefox xulrunner
Definition Synopsis:
Oracle Linux 5 release section Oracle Linux 5.x Packages match section firefox is earlier than 0:17.0.6-1.0.1.el5_9 AND xulrunner is earlier than 0:17.0.6-1.0.1.el5_9 AND xulrunner-devel is earlier than 0:17.0.6-1.0.1.el5_9 AND Oracle Linux 6 release section Oracle Linux 6.x Packages match section firefox is earlier than 0:17.0.6-1.0.1.el6_4 AND xulrunner is earlier than 0:17.0.6-2.0.1.el6_4 AND xulrunner-devel is earlier than 0:17.0.6-2.0.1.el6_4

Definition Id: oval:org.mitre.oval:def:27481

Oval ID:	oval:org.mitre.oval:def:27481
Title:	DEPRECATED: ELSA-2013-0821 -- thunderbird security update (important)
Description:	[17.0.6-2.0.1.el6_4] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [17.0.6-2] - Update to 17.0.6 ESR
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-0821 CVE-2013-0801 CVE-2013-1670 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681	Version:	4
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	thunderbird
Definition Synopsis:
Oracle Linux 5 release section Oracle Linux 5.x AND thunderbird is earlier than 0:17.0.6-1.0.1.el5_9 AND Oracle Linux 6 release section Oracle Linux 6.x AND thunderbird is earlier than 0:17.0.6-2.0.1.el6_4

CPE : Common Platform Enumeration

Type	Description	Count
Application	Mozilla Firefox cpe:2.3:a:mozilla:firefox:20.0.1:::::::* cpe:2.3:a:mozilla:firefox:20.0:::::::* cpe:2.3:a:mozilla:firefox:20.0:alpha1:::::: cpe:2.3:a:mozilla:firefox:19.0.2:::::::* cpe:2.3:a:mozilla:firefox:19.0.1:::::::* cpe:2.3:a:mozilla:firefox:19.0:::::-:: cpe:2.3:a:mozilla:firefox:18.0.2:::::::* cpe:2.3:a:mozilla:firefox:18.0.1:::::::* cpe:2.3:a:mozilla:firefox:18.0:::::-:: cpe:2.3:a:mozilla:firefox:17.0.9:::::::* cpe:2.3:a:mozilla:firefox:17.0.8:::::::* cpe:2.3:a:mozilla:firefox:17.0.7:::::::* cpe:2.3:a:mozilla:firefox:17.0.6:::::::* cpe:2.3:a:mozilla:firefox:17.0.5:::::::* cpe:2.3:a:mozilla:firefox:17.0.4:::::::* cpe:2.3:a:mozilla:firefox:17.0.3:::::::* cpe:2.3:a:mozilla:firefox:17.0.2:::::::* cpe:2.3:a:mozilla:firefox:17.0.11:::::::* cpe:2.3:a:mozilla:firefox:17.0.10:::::::* cpe:2.3:a:mozilla:firefox:17.0.1:::::::* cpe:2.3:a:mozilla:firefox:17.0:::::-:: cpe:2.3:a:mozilla:firefox:16.0.2:::::::* cpe:2.3:a:mozilla:firefox:16.0.1:::::::* cpe:2.3:a:mozilla:firefox:16.0:::::-:: cpe:2.3:a:mozilla:firefox:15.0.1:::::::* cpe:2.3:a:mozilla:firefox:15.0:::::-:: cpe:2.3:a:mozilla:firefox:14.0.1:::::::* cpe:2.3:a:mozilla:firefox:14.0:::::-:: cpe:2.3:a:mozilla:firefox:13.0.1:::::::* cpe:2.3:a:mozilla:firefox:13.0:::::::* cpe:2.3:a:mozilla:firefox:12.0:-:::::: cpe:2.3:a:mozilla:firefox:12.0:beta6:::::: cpe:2.3:a:mozilla:firefox:11.0:::::::* cpe:2.3:a:mozilla:firefox:10.0.9:::::::* cpe:2.3:a:mozilla:firefox:10.0.8:::::::* cpe:2.3:a:mozilla:firefox:10.0.7:::::::* cpe:2.3:a:mozilla:firefox:10.0.6:::::::* cpe:2.3:a:mozilla:firefox:10.0.5:::::::* cpe:2.3:a:mozilla:firefox:10.0.4:::::::* cpe:2.3:a:mozilla:firefox:10.0.3:::::::* cpe:2.3:a:mozilla:firefox:10.0.2:::::::* cpe:2.3:a:mozilla:firefox:10.0.12:::::::* cpe:2.3:a:mozilla:firefox:10.0.11:::::::* cpe:2.3:a:mozilla:firefox:10.0.10:::::::* cpe:2.3:a:mozilla:firefox:10.0.1:::::::* cpe:2.3:a:mozilla:firefox:10.0:::::::* cpe:2.3:a:mozilla:firefox:9.0.1:::::::* cpe:2.3:a:mozilla:firefox:9.0:::::::* cpe:2.3:a:mozilla:firefox:8.0.1:::::::* cpe:2.3:a:mozilla:firefox:8.0:::::::* cpe:2.3:a:mozilla:firefox:7.0.1:::::::* cpe:2.3:a:mozilla:firefox:7.0:::::::* cpe:2.3:a:mozilla:firefox:6.0.2:::::::* cpe:2.3:a:mozilla:firefox:6.0.1:::::::* cpe:2.3:a:mozilla:firefox:6.0:::::::* cpe:2.3:a:mozilla:firefox:5.0.1:::::::* cpe:2.3:a:mozilla:firefox:5.0:::::::* cpe:2.3:a:mozilla:firefox:4.0.1:::::::* cpe:2.3:a:mozilla:firefox:4.0:beta1:::::: cpe:2.3:a:mozilla:firefox:4.0:beta6:::::: cpe:2.3:a:mozilla:firefox:4.0:beta3:::::: cpe:2.3:a:mozilla:firefox:4.0:beta5:::::: cpe:2.3:a:mozilla:firefox:4.0:beta4:::::: cpe:2.3:a:mozilla:firefox:4.0:beta2:::::: cpe:2.3:a:mozilla:firefox:4.0:beta12:::::: cpe:2.3:a:mozilla:firefox:4.0:-:::::: cpe:2.3:a:mozilla:firefox:4.0:beta11:::::: cpe:2.3:a:mozilla:firefox:4.0:beta10:::::: cpe:2.3:a:mozilla:firefox:4.0:beta7:::::: cpe:2.3:a:mozilla:firefox:4.0:beta8:::::: cpe:2.3:a:mozilla:firefox:4.0:beta9:::::: cpe:2.3:a:mozilla:firefox:3.7:a1_pre:::::: cpe:2.3:a:mozilla:firefox:3.7:alpha1:::::: cpe:2.3:a:mozilla:firefox:3.7:alpha2:::::: cpe:2.3:a:mozilla:firefox:3.7:a1_prerelease:::::: cpe:2.3:a:mozilla:firefox:3.6.9:::::::* cpe:2.3:a:mozilla:firefox:3.6.8:::::::* cpe:2.3:a:mozilla:firefox:3.6.7:::::::* cpe:2.3:a:mozilla:firefox:3.6.6:::::::* cpe:2.3:a:mozilla:firefox:3.6.4:::::::* cpe:2.3:a:mozilla:firefox:3.6.3:::::::* cpe:2.3:a:mozilla:firefox:3.6.28:::::::* cpe:2.3:a:mozilla:firefox:3.6.27:::::::* cpe:2.3:a:mozilla:firefox:3.6.26:::::::* cpe:2.3:a:mozilla:firefox:3.6.25:::::::* cpe:2.3:a:mozilla:firefox:3.6.24:::::::* cpe:2.3:a:mozilla:firefox:3.6.23:::::::* cpe:2.3:a:mozilla:firefox:3.6.22:::::::* cpe:2.3:a:mozilla:firefox:3.6.21:::::::* cpe:2.3:a:mozilla:firefox:3.6.20:::::::* cpe:2.3:a:mozilla:firefox:3.6.2:::::::* cpe:2.3:a:mozilla:firefox:3.6.19:::::::* cpe:2.3:a:mozilla:firefox:3.6.18:::::::* cpe:2.3:a:mozilla:firefox:3.6.17:::::::* cpe:2.3:a:mozilla:firefox:3.6.16:::::::* cpe:2.3:a:mozilla:firefox:3.6.15:::::::* cpe:2.3:a:mozilla:firefox:3.6.14:::::::* cpe:2.3:a:mozilla:firefox:3.6.13:::::::* cpe:2.3:a:mozilla:firefox:3.6.12:::::::* cpe:2.3:a:mozilla:firefox:3.6.11:::::::* cpe:2.3:a:mozilla:firefox:3.6.10:::::::* cpe:2.3:a:mozilla:firefox:3.6.1:::::::* cpe:2.3:a:mozilla:firefox:3.6:::::::* cpe:2.3:a:mozilla:firefox:3.6:a1_pre:::::: cpe:2.3:a:mozilla:firefox:3.6:a1:-:linux:::: cpe:2.3:a:mozilla:firefox:3.6:beta2:::::: cpe:2.3:a:mozilla:firefox:3.6:beta1:::::: cpe:2.3:a:mozilla:firefox:3.6:a1::linux::::* cpe:2.3:a:mozilla:firefox:3.6:a1:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.6:a1:::::: cpe:2.3:a:mozilla:firefox:3.6:a1_prerelease:::::: cpe:2.3:a:mozilla:firefox:3.5.9:::::::* cpe:2.3:a:mozilla:firefox:3.5.8:::::::* cpe:2.3:a:mozilla:firefox:3.5.7:::::::* cpe:2.3:a:mozilla:firefox:3.5.6:::::::* cpe:2.3:a:mozilla:firefox:3.5.5:::::::* cpe:2.3:a:mozilla:firefox:3.5.4:::::::* cpe:2.3:a:mozilla:firefox:3.5.3:::::::* cpe:2.3:a:mozilla:firefox:3.5.2:::::::* cpe:2.3:a:mozilla:firefox:3.5.2:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.5.2::linux::::: cpe:2.3:a:mozilla:firefox:3.5.2::~~~linux~~::::: cpe:2.3:a:mozilla:firefox:3.5.2:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.5.19:::::::* cpe:2.3:a:mozilla:firefox:3.5.18:::::::* cpe:2.3:a:mozilla:firefox:3.5.17:::::::* cpe:2.3:a:mozilla:firefox:3.5.16:::::::* cpe:2.3:a:mozilla:firefox:3.5.15:::::::* cpe:2.3:a:mozilla:firefox:3.5.14:::::::* cpe:2.3:a:mozilla:firefox:3.5.13:::::::* cpe:2.3:a:mozilla:firefox:3.5.12:::::::* cpe:2.3:a:mozilla:firefox:3.5.11:::::::* cpe:2.3:a:mozilla:firefox:3.5.10:::::::* cpe:2.3:a:mozilla:firefox:3.5.1:::::::* cpe:2.3:a:mozilla:firefox:3.5.1:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.5.1:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.5:::::::* cpe:2.3:a:mozilla:firefox:3.5:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.5:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.2:beta2:::::: cpe:2.3:a:mozilla:firefox:3.2:beta3:::::: cpe:2.3:a:mozilla:firefox:3.2:beta1:::::: cpe:2.3:a:mozilla:firefox:3.1:beta1:::::: cpe:2.3:a:mozilla:firefox:3.0beta5:::::::* cpe:2.3:a:mozilla:firefox:3.0.9:::::::* cpe:2.3:a:mozilla:firefox:3.0.9:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.9:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.8:::::::* cpe:2.3:a:mozilla:firefox:3.0.8:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.8:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.7:::::::* cpe:2.3:a:mozilla:firefox:3.0.7:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.7:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.6:::::::* cpe:2.3:a:mozilla:firefox:3.0.6:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.6:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.5:::::::* cpe:2.3:a:mozilla:firefox:3.0.5:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.5:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.4:::::::* cpe:2.3:a:mozilla:firefox:3.0.4:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.4:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.3:::::::* cpe:2.3:a:mozilla:firefox:3.0.3:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.3:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.2:::::::* cpe:2.3:a:mozilla:firefox:3.0.2:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.2:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.19:::::::* cpe:2.3:a:mozilla:firefox:3.0.18:::::::* cpe:2.3:a:mozilla:firefox:3.0.17:::::::* cpe:2.3:a:mozilla:firefox:3.0.16:::::::* cpe:2.3:a:mozilla:firefox:3.0.15:::::::* cpe:2.3:a:mozilla:firefox:3.0.14:::::::* cpe:2.3:a:mozilla:firefox:3.0.13:::::::* cpe:2.3:a:mozilla:firefox:3.0.13:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.13:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.12:::::::* cpe:2.3:a:mozilla:firefox:3.0.12:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.12:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.11:::::::* cpe:2.3:a:mozilla:firefox:3.0.11:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.11:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.10:::::::* cpe:2.3:a:mozilla:firefox:3.0.10:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.10:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.1:::::::* cpe:2.3:a:mozilla:firefox:3.0.1:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.1:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0:-:::::: cpe:2.3:a:mozilla:firefox:3.0:alpha:::::: cpe:2.3:a:mozilla:firefox:3.0:beta5:::::: cpe:2.3:a:mozilla:firefox:3.0:beta2:::::: cpe:2.3:a:mozilla:firefox:3.0:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.9:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.9:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.9:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.8:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.8:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.8:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.7:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.7:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.7:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.6:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.6:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.6:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.5:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.5:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.5:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.4:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.4:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.4:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.3:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.3:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.3:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.21:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.20:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.20:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.20:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.2:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.2:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.2:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.19:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.19:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.19:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.18:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.18:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.18:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.17:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.17:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.17:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.16:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.16:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.16:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.15:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.15:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.15:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.14:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.14:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.14:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.13:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.13:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.13:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.12:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.12:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.12:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.11:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.11:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.11:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.10:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.10:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.10:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.1:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.1:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.1:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0_8:::::::* cpe:2.3:a:mozilla:firefox:2.0_.9:::::::* cpe:2.3:a:mozilla:firefox:2.0_.7:::::::* cpe:2.3:a:mozilla:firefox:2.0_.6:::::::* cpe:2.3:a:mozilla:firefox:2.0_.5:::::::* cpe:2.3:a:mozilla:firefox:2.0_.4:::::::* cpe:2.3:a:mozilla:firefox:2.0_.10:::::::* cpe:2.3:a:mozilla:firefox:2.0_.1:::::::* cpe:2.3:a:mozilla:firefox:2.0:::::::* cpe:2.3:a:mozilla:firefox:2.0:beta1:::::: cpe:2.3:a:mozilla:firefox:2.0:beta_1:::::: cpe:2.3:a:mozilla:firefox:2.0:rc3:::::: cpe:2.3:a:mozilla:firefox:2.0:rc2:::::: cpe:2.3:a:mozilla:firefox:2.0:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:1.8:::::::* cpe:2.3:a:mozilla:firefox:1.5.8:::::::* cpe:2.3:a:mozilla:firefox:1.5.7:::::::* cpe:2.3:a:mozilla:firefox:1.5.6:::::::* cpe:2.3:a:mozilla:firefox:1.5.5:::::::* cpe:2.3:a:mozilla:firefox:1.5.4:::::::* cpe:2.3:a:mozilla:firefox:1.5.3:::::::* cpe:2.3:a:mozilla:firefox:1.5.2:::::::* cpe:2.3:a:mozilla:firefox:1.5.1:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.9:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.8:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.7:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.6:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.5:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.4:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.3:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.2:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.12:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.11:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.10:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.1:::::::* cpe:2.3:a:mozilla:firefox:1.5:-:::::: cpe:2.3:a:mozilla:firefox:1.5:beta2:::::: cpe:2.3:a:mozilla:firefox:1.5:beta1:::::: cpe:2.3:a:mozilla:firefox:1.4.1:::::::* cpe:2.3:a:mozilla:firefox:1.0.8:::::::* cpe:2.3:a:mozilla:firefox:1.0.7:::::::* cpe:2.3:a:mozilla:firefox:1.0.6:::::::* cpe:2.3:a:mozilla:firefox:1.0.6::linux::::: cpe:2.3:a:mozilla:firefox:1.0.5:::::::* cpe:2.3:a:mozilla:firefox:1.0.4:::::::* cpe:2.3:a:mozilla:firefox:1.0.3:::::::* cpe:2.3:a:mozilla:firefox:1.0.2:::::::* cpe:2.3:a:mozilla:firefox:1.0.1:::::::* cpe:2.3:a:mozilla:firefox:1.0:preview_release:::::: cpe:2.3:a:mozilla:firefox:1.0:-:::::: cpe:2.3:a:mozilla:firefox:0.9.3:::::::* cpe:2.3:a:mozilla:firefox:0.9.2:::::::* cpe:2.3:a:mozilla:firefox:0.9.1:::::::* cpe:2.3:a:mozilla:firefox:0.9_rc:::::::* cpe:2.3:a:mozilla:firefox:0.9:rc:::::: cpe:2.3:a:mozilla:firefox:0.9:::::::* cpe:2.3:a:mozilla:firefox:0.8:::::::* cpe:2.3:a:mozilla:firefox:0.7.1:::::::* cpe:2.3:a:mozilla:firefox:0.7:::::::* cpe:2.3:a:mozilla:firefox:0.6.1:::::::* cpe:2.3:a:mozilla:firefox:0.6:::::::* cpe:2.3:a:mozilla:firefox:0.5:::::::* cpe:2.3:a:mozilla:firefox:0.4:::::::* cpe:2.3:a:mozilla:firefox:0.3:::::::* cpe:2.3:a:mozilla:firefox:0.2:::::::* cpe:2.3:a:mozilla:firefox:0.10.1:::::::* cpe:2.3:a:mozilla:firefox:0.10:::::::* cpe:2.3:a:mozilla:firefox:0.1:::::::* cpe:2.3:a:mozilla:firefox:::::::: cpe:2.3:a:mozilla:firefox:::::::x86:* cpe:2.3:a:mozilla:firefox::::::x86::* cpe:2.3:a:mozilla:firefox::::::iphone_os::* cpe:2.3:a:mozilla:firefox::::::-::* cpe:2.3:a:mozilla:firefox::::::android::* cpe:2.3:a:mozilla:firefox:::::android:::* cpe:2.3:a:mozilla:firefox:-:::::::* cpe:2.3:a:mozilla:firefox:-:::::iphone_os::	334
Application	Mozilla Firefox Esr cpe:2.3:a:mozilla:firefox_esr:17.0.5:::::::* cpe:2.3:a:mozilla:firefox_esr:17.0.4:::::::* cpe:2.3:a:mozilla:firefox_esr:17.0.3:::::::* cpe:2.3:a:mozilla:firefox_esr:17.0.2:::::::* cpe:2.3:a:mozilla:firefox_esr:17.0.1:::::::* cpe:2.3:a:mozilla:firefox_esr:17.0:::::::*	6
Application	Mozilla Thunderbird cpe:2.3:a:mozilla:thunderbird:17.0.5:::::::* cpe:2.3:a:mozilla:thunderbird:17.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:17.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:17.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:17.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:17.0:::::::* cpe:2.3:a:mozilla:thunderbird:17.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:17.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:17.0:beta3:::::: cpe:2.3:a:mozilla:thunderbird:16.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:16.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:16.0:::::::* cpe:2.3:a:mozilla:thunderbird:16.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:16.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:16.0:beta3:::::: cpe:2.3:a:mozilla:thunderbird:16.0:beta4:::::: cpe:2.3:a:mozilla:thunderbird:15.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:15.0:::::::* cpe:2.3:a:mozilla:thunderbird:15.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:15.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:15.0:beta3:::::: cpe:2.3:a:mozilla:thunderbird:15.0:beta4:::::: cpe:2.3:a:mozilla:thunderbird:15.0:beta5:::::: cpe:2.3:a:mozilla:thunderbird:14.0:::::::* cpe:2.3:a:mozilla:thunderbird:14.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:14.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:14.0:beta3:::::: cpe:2.3:a:mozilla:thunderbird:14.0:beta4:::::: cpe:2.3:a:mozilla:thunderbird:14.0:beta5:::::: cpe:2.3:a:mozilla:thunderbird:13.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:13.0:::::::* cpe:2.3:a:mozilla:thunderbird:13.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:13.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:13.0:beta3:::::: cpe:2.3:a:mozilla:thunderbird:13.0:beta4:::::: cpe:2.3:a:mozilla:thunderbird:12.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:12.0:::::::* cpe:2.3:a:mozilla:thunderbird:12.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:12.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:12.0:beta3:::::: cpe:2.3:a:mozilla:thunderbird:12.0:beta4:::::: cpe:2.3:a:mozilla:thunderbird:12.0:beta5:::::: cpe:2.3:a:mozilla:thunderbird:11.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:11.0:::::::* cpe:2.3:a:mozilla:thunderbird:11.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:11.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:11.0:beta3:::::: cpe:2.3:a:mozilla:thunderbird:11.0:beta4:::::: cpe:2.3:a:mozilla:thunderbird:11.0:beta5:::::: cpe:2.3:a:mozilla:thunderbird:10.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:10.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:10.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:10.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:10.0:::::::* cpe:2.3:a:mozilla:thunderbird:10.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:10.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:10.0:beta3:::::: cpe:2.3:a:mozilla:thunderbird:10.0:beta4:::::: cpe:2.3:a:mozilla:thunderbird:10.0:beta5:::::: cpe:2.3:a:mozilla:thunderbird:9.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:9.0:::::::* cpe:2.3:a:mozilla:thunderbird:9.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:9.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:9.0:beta3:::::: cpe:2.3:a:mozilla:thunderbird:9.0:beta4:::::: cpe:2.3:a:mozilla:thunderbird:9.0:beta5:::::: cpe:2.3:a:mozilla:thunderbird:8.0:::::::* cpe:2.3:a:mozilla:thunderbird:8.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:8.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:8.0:beta3:::::: cpe:2.3:a:mozilla:thunderbird:8.0:beta4:::::: cpe:2.3:a:mozilla:thunderbird:8.0:beta5:::::: cpe:2.3:a:mozilla:thunderbird:7.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:7.0:::::::* cpe:2.3:a:mozilla:thunderbird:7.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:7.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:7.0:beta3:::::: cpe:2.3:a:mozilla:thunderbird:6.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:6.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:6.0:::::::* cpe:2.3:a:mozilla:thunderbird:6.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:6.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:6.0:beta3:::::: cpe:2.3:a:mozilla:thunderbird:5.0:::::::* cpe:2.3:a:mozilla:thunderbird:5.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:5.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:3.3:alpha1:::::: cpe:2.3:a:mozilla:thunderbird:3.3:alpha2:::::: cpe:2.3:a:mozilla:thunderbird:3.3:alpha3:::::: cpe:2.3:a:mozilla:thunderbird:3.1.9:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.8:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.7:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.6:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.5:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.4:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.3:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.20:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.2:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.19:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.18:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.17:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.16:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.15:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.14:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.13:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.12:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.11:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.10:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.1:::::::* cpe:2.3:a:mozilla:thunderbird:3.1:alpha1:::::: cpe:2.3:a:mozilla:thunderbird:3.1:beta1:::::: cpe:2.3:a:mozilla:thunderbird:3.1:beta2:::::: cpe:2.3:a:mozilla:thunderbird:3.1:rc1:::::: cpe:2.3:a:mozilla:thunderbird:3.1:rc2:::::: cpe:2.3:a:mozilla:thunderbird:3.1:-:::::: cpe:2.3:a:mozilla:thunderbird:3.0.9:::::::* cpe:2.3:a:mozilla:thunderbird:3.0.8:::::::* cpe:2.3:a:mozilla:thunderbird:3.0.7:::::::* cpe:2.3:a:mozilla:thunderbird:3.0.6:::::::* cpe:2.3:a:mozilla:thunderbird:3.0.5:::::::* cpe:2.3:a:mozilla:thunderbird:3.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:3.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:3.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:3.0.11:::::::* cpe:2.3:a:mozilla:thunderbird:3.0.10:::::::* cpe:2.3:a:mozilla:thunderbird:3.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:3.0:alpha1:::::: cpe:2.3:a:mozilla:thunderbird:3.0:alpha2:::::: cpe:2.3:a:mozilla:thunderbird:3.0:alpha3:::::: cpe:2.3:a:mozilla:thunderbird:3.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:3.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:3.0:beta3:::::: cpe:2.3:a:mozilla:thunderbird:3.0:beta4:::::: cpe:2.3:a:mozilla:thunderbird:3.0:rc1:::::: cpe:2.3:a:mozilla:thunderbird:3.0:rc2:::::: cpe:2.3:a:mozilla:thunderbird:3.0:-:::::: cpe:2.3:a:mozilla:thunderbird:2.0.0.9:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.8:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.7:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.6:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.5:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.24:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.23:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.22:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.21:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.20:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.19:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.18:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.17:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.16:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.15:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.14:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.13:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.12:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.11:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.0:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.0:rc1:::::: cpe:2.3:a:mozilla:thunderbird:2.0_8:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.9:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.6:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.5:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.4:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.14:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.13:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.12:::::::* cpe:2.3:a:mozilla:thunderbird:2.0:alpha1:::::: cpe:2.3:a:mozilla:thunderbird:2.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:2.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:2.0:-:::::: cpe:2.3:a:mozilla:thunderbird:1.7.3:::::::* cpe:2.3:a:mozilla:thunderbird:1.7.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.2:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.9:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.8:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.7:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.6:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.5:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.14:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.13:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.12:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.11:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.10:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.5:beta2:::::: cpe:2.3:a:mozilla:thunderbird:1.5:beta1:::::: cpe:2.3:a:mozilla:thunderbird:1.5:rc1:::::: cpe:2.3:a:mozilla:thunderbird:1.5:rc2:::::: cpe:2.3:a:mozilla:thunderbird:1.5:-:::::: cpe:2.3:a:mozilla:thunderbird:1.1:alpha1:::::: cpe:2.3:a:mozilla:thunderbird:1.1:alpha2:::::: cpe:2.3:a:mozilla:thunderbird:1.0.8:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.7:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.6:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.5:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:::::: cpe:2.3:a:mozilla:thunderbird:1.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.0:rc:::::: cpe:2.3:a:mozilla:thunderbird:1.0:-:::::: cpe:2.3:a:mozilla:thunderbird:0.9:::::::* cpe:2.3:a:mozilla:thunderbird:0.8:::::::* cpe:2.3:a:mozilla:thunderbird:0.7.3:::::::* cpe:2.3:a:mozilla:thunderbird:0.7.2:::::::* cpe:2.3:a:mozilla:thunderbird:0.7.1:::::::* cpe:2.3:a:mozilla:thunderbird:0.7:rc:::::: cpe:2.3:a:mozilla:thunderbird:0.7:-:::::: cpe:2.3:a:mozilla:thunderbird:0.6:::::::* cpe:2.3:a:mozilla:thunderbird:0.5:::::::* cpe:2.3:a:mozilla:thunderbird:0.4:::::::* cpe:2.3:a:mozilla:thunderbird:0.3:::::::* cpe:2.3:a:mozilla:thunderbird:0.2:::::::* cpe:2.3:a:mozilla:thunderbird:0.1:::::::* cpe:2.3:a:mozilla:thunderbird:::::::: cpe:2.3:a:mozilla:thunderbird:::::::x86:* cpe:2.3:a:mozilla:thunderbird:-:::::::*	225
Application	Mozilla Thunderbird Esr cpe:2.3:a:mozilla:thunderbird_esr:17.0.5:::::::* cpe:2.3:a:mozilla:thunderbird_esr:17.0.4:::::::* cpe:2.3:a:mozilla:thunderbird_esr:17.0.3:::::::* cpe:2.3:a:mozilla:thunderbird_esr:17.0.2:::::::* cpe:2.3:a:mozilla:thunderbird_esr:17.0.1:::::::* cpe:2.3:a:mozilla:thunderbird_esr:17.0:::::::*	6

ExploitDB Exploits

id	Description
2014-08-19	Firefox toString console.time Privileged Javascript Injection

Nessus® Vulnerability Scanner

Date	Description
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-448.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-447.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-438.nasl - Type : ACT_GATHER_INFO
2013-09-28	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201309-23.nasl - Type : ACT_GATHER_INFO
2013-07-18	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_firefox-20130628-130702.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2013-0821.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-0820.nasl - Type : ACT_GATHER_INFO
2013-07-07	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2720.nasl - Type : ACT_GATHER_INFO
2013-06-03	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2699.nasl - Type : ACT_GATHER_INFO
2013-05-16	Name : The remote Windows host contains a mail client that is potentially affected b... File : mozilla_thunderbird_1706_esr.nasl - Type : ACT_GATHER_INFO
2013-05-16	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130514_thunderbird_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2013-05-16	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130514_firefox_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2013-05-16	Name : The remote Windows host contains a mail client that is potentially affected b... File : mozilla_thunderbird_1706.nasl - Type : ACT_GATHER_INFO
2013-05-16	Name : The remote Windows host contains a web browser that is potentially affected b... File : mozilla_firefox_21.nasl - Type : ACT_GATHER_INFO
2013-05-16	Name : The remote Windows host contains a web browser that is potentially affected b... File : mozilla_firefox_1706_esr.nasl - Type : ACT_GATHER_INFO
2013-05-16	Name : The remote Mac OS X host contains a mail client that is potentially affected ... File : macosx_thunderbird_17_0_6_esr.nasl - Type : ACT_GATHER_INFO
2013-05-16	Name : The remote Mac OS X host contains a mail client that is potentially affected ... File : macosx_thunderbird_17_0_6.nasl - Type : ACT_GATHER_INFO
2013-05-16	Name : The remote Mac OS X host contains a web browser that is potentially affected ... File : macosx_firefox_21.nasl - Type : ACT_GATHER_INFO
2013-05-16	Name : The remote Mac OS X host contains a web browser that is potentially affected ... File : macosx_firefox_17_0_6_esr.nasl - Type : ACT_GATHER_INFO
2013-05-16	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_4a1ca8a4bd8211e2b7a0d43d7e0c7c02.nasl - Type : ACT_GATHER_INFO
2013-05-15	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-0820.nasl - Type : ACT_GATHER_INFO
2013-05-15	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0820.nasl - Type : ACT_GATHER_INFO
2013-05-15	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0821.nasl - Type : ACT_GATHER_INFO
2013-05-15	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1822-1.nasl - Type : ACT_GATHER_INFO
2013-05-15	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1823-1.nasl - Type : ACT_GATHER_INFO
2013-05-15	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2013-0821.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:57:11	Multiple Updates
2013-05-16 17:21:31	Multiple Updates
2013-05-15 00:18:46	First insertion

Global Informations

Type	Count
CWE ID(s)	10
Oval ID(s)	21
CPE ID(s)	571
ExploitDB Exploit(s)	1
Nessus® Exploit(s)	26

	Related
10	CVE-2013-1681
10	CVE-2013-1680
10	CVE-2013-1679
10	CVE-2013-1678
10	CVE-2013-1677
10	CVE-2013-1676
10	CVE-2013-0801
9.3	CVE-2013-1674
4.3	CVE-2013-1675
4.3	CVE-2013-1670
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 10 more Alert(s)