CVE-2013-1708

Publication date 6 August 2013

Last updated 24 July 2024


Ubuntu priority

Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (application crash) via a crafted WAV file that is not properly handled by the nsCString::CharAt function.

Status

Package Ubuntu Release Status
firefox 13.04 raring
Fixed 23.0+build2-0ubuntu0.13.04.1
12.10 quantal
Fixed 23.0+build2-0ubuntu0.12.10.1
12.04 LTS precise
Fixed 23.0+build2-0ubuntu0.12.04.1
10.04 LTS lucid Ignored end of life

References

Related Ubuntu Security Notices (USN)

    • USN-1924-1
    • Firefox vulnerabilities
    • 6 August 2013

Other references