安装的 Firefox 版本低于 18.0，因此可能受到以下安全问题的影响：

- 存在多个不明的释放后使用、越界读取和缓冲区溢出错误。（CVE-2012-5829、CVE-2013-0760、CVE-2013-0761、CVE-2013-0762、CVE-2013-0763、CVE-2013-0766、CVE-2013-0767、CVE-2013-0771）

- TURKTRUST 证书颁发机构不正确地颁发两个中间证书。(CVE-2013-0743)

- 显示包含多列和列群组的 HTML 表时，存在相关的释放后使用错误。
 (CVE-2013-0744)

- 存在与“AutoWrapperChanger”类有关的错误，无法在垃圾回收过程中正确管理对象。(CVE-2012-0745)

- 存在与“jsval”、“quickstubs”和隔离舱不匹配相关的错误，可能导致可被利用的崩溃。(CVE-2013-0746)

- 在插件处理程序中存在涉及事件的错误，可允许绕过同源策略。
 (CVE-2013-0747)

- 与 XBL 对象的“toString”方法相关的错误可导致地址信息泄漏。
 (CVE-2013-0748)

- 存在不明的内存损坏问题。
 （CVE-2013-0749、CVE-2013-0769、CVE-2013-0770）

- 存在与 JavaScript 字符串连接有关的缓冲区溢出。(CVE-2013-0750)

- 存在涉及具有 XBL 文件中所包含 SVG 内容的多个 XML 绑定的错误。(CVE-2013-0752)

- 存在与“XMLSerializer”和“serializeToStream”有关的释放后使用错误。
 (CVE-2013-0753)

- 存在与垃圾回收和“ListenManager”有关的释放后使用错误。(CVE-2013-0754)

- 存在涉及“Vibrate”库和“domDoc”的释放后使用错误。(CVE-2013-0755)

- 存在涉及 JavaScript“Proxy”对象的释放后使用错误。(CVE-2013-0756) - 可通过更改对象原型绕过“Chrome 对象封装程序”(COW)，这可能允许执行任意代码。(CVE-2013-0757)

- 与 SVG 元素和插件有关的错误可允许权限升级。(CVE-2013-0758)

- 存在涉及地址栏的错误，可能允许 URL 欺骗攻击。(CVE-2013-0759)

- 存在涉及 SSL 和线程的错误，可能会导致可利用的崩溃。
 (CVE-2013-0764)

- 存在涉及“Canvas”的错误，从 HTML 向其传递错误的高度或宽度值。(CVE-2013-0768)

远程主机受到 GLSA-201309-23 中所述漏洞的影响（Mozilla 产品：多种漏洞）

在 Mozilla Firefox、Thunderbird 和 SeaMonkey 中发现多种漏洞。请检查下面引用的 CVE 标识符以了解详细信息。
 影响：

远程攻击者可引诱用户查看特别构建的网页或电子邮件，这可能导致执行任意代码或拒绝服务的情况。此外，远程攻击者可进行 XSS 攻击、欺骗 URL、绕过地址空间布局随机化、进行点击劫持攻击、获取潜在敏感信息、绕过访问限制、修改本地文件系统或进行其他不明攻击。
 变通方案：

目前无任何已知的变通方案。

Versions of Firefox prior to 18.0 are potentially affected by the following security issues :

 - Multiple, unspecified use-after-free, out-of-bounds read and buffer overflow errors exist. (CVE-2012-5829, CVE-2013-0760, CVE-2013-0761, CVE-2013-0762, CVE-2013-0763, CVE-2013-0766, CVE-2013-0767, CVE-2013-0771)
 - Two intermediate certificates were improperly issued by TURKTRUST certificate authority. (CVE-2013-0743)
 - A use-after-free error exists related to displaying HTML tables with many columns and column groups. (CVE-2013-0744)
 - An error exists related to the 'AutoWrapperChanger' class that does not properly manage objects during garbage collection. (CVE-2012-0745)
 - An error exists related to 'jsval', 'quickstubs', and compartmental mismatches that can lead potentially exploitable crashes. (CVE-2013-0746)
 - Errors exist related to events in the plugin handler that can allow same-origin policy bypass. (CVE-2013-0747)
 - An error related to the 'toString' method of XBL objects can lead to address information leakage. (CVE-2013-0748)
 - An unspecified memory corruption issue exists. (CVE-2013-0749, CVE-2013-0769, CVE-2013-0770)
 - A buffer overflow exists related to JavaScript string concatenation. (CVE-2013-0750)
 - An error exists related to multiple XML bindings with SVG content, contained in XBL files. (CVE-2013-0752)
 - A use-after-free error exists related to 'XMLSerializer' and 'serializeToStream'. (CVE-2013-0753)
 - A use-after-free error exists related to garbage collection and 'ListenManager'. (CVE-2013-0754)
 - A use-after-free error exists related to the 'Vibrate' library and 'domDoc'. (CVE-2013-0755)
 - A use-after-free error exists related to JavaScript 'Proxy' objects. (CVE-2013-0756)
 - 'Chrome Object Wrappers' (COW) can be bypassed by changing object prototypes and can allow arbitrary code execution. (CVE-2013-0757)
 - An error related to SVG elements and plugins can allow privilege escalation. (CVE-2013-0758)
 - An error exists related to the address bar that can allow URL spoofing attacks. (CVE-2013-0759)
 - An error exists related to SSL and threading that can result in potentially exploitable crashes. (CVE-2013-0764)
 - An error exists related to 'Canvas' and bad height or width values passed to it from HTML. (CVE-2013-0768)

Versions of SeaMonkey 2.14.x are potentially affected by the following security issues :

  - Multiple, unspecified use-after-free, out-of-bounds read and buffer overflow errors exist. (CVE-2012-5829, CVE-2013-0760, CVE-2013-0761, CVE-2013-0762, CVE-2013-0763, CVE-2013-0766, CVE-2013-0767, CVE-2013-0771)

  - Two intermediate certificates were improperly issued by TURKTRUST certificate authority. (CVE-2013-0743)

  - A use-after-free error exists related to displaying HTML tables with many columns and column groups. (CVE-2013-0744)

  - An error exists related to the 'AutoWrapperChanger' class that does not properly manage objects during garbage collection. (CVE-2012-0745)

  - An error exists related to 'jsval', 'quickstubs', and compartmental mismatches that can lead potentially exploitable crashes. (CVE-2013-0746)

  - Errors exist related to events in the plugin handler that can allow same-origin policy bypass. (CVE-2013-0747)

  - An error related to the 'toString' method of XBL objects can lead to address information leakage. (CVE-2013-0748)

  - An unspecified memory corruption issue exists. (CVE-2013-0749, CVE-2013-0769, CVE-2013-0770)

  - A buffer overflow exists related to JavaScript string concatenation. (CVE-2013-0750)

  - An error exists related to multiple XML bindings with SVG content, contained in XBL files. (CVE-2013-0752)

  - A use-after-free error exists related to 'XMLSerializer' and 'serializeToStream'. (CVE-2013-0753)

  - A use-after-free error exists related to garbage collection and 'ListenManager'. (CVE-2013-0754)

  - A use-after-free error exists related to the 'Vibrate' library and 'domDoc'. (CVE-2013-0755)

  - A use-after-free error exists related to JavaScript 'Proxy' objects. (CVE-2013-0756)

  - 'Chrome Object Wrappers' (COW) can be bypassed by changing object prototypes and can allow arbitrary code execution. (CVE-2013-0757)

  - An error related to SVG elements and plugins can allow privilege escalation. (CVE-2013-0758)

  - An error exists related to the address bar that can allow URL spoofing attacks. (CVE-2013-0759)

  - An error exists related to SSL and threading that can result in potentially exploitable crashes. (CVE-2013-0764)

  - An error exists related to 'Canvas' and bad height or width values passed to it from HTML. (CVE-2013-0768)

Versions of Firefox 17.x are potentially affected by the following security issues :

  - Multiple, unspecified use-after-free, out-of-bounds read and buffer overflow errors exist. (CVE-2012-5829, CVE-2013-0760, CVE-2013-0761, CVE-2013-0762, CVE-2013-0763, CVE-2013-0766, CVE-2013-0767, CVE-2013-0771)

  - Two intermediate certificates were improperly issued by TURKTRUST certificate authority. (CVE-2013-0743)

  - A use-after-free error exists related to displaying HTML tables with many columns and column groups. (CVE-2013-0744)

  - An error exists related to the 'AutoWrapperChanger' class that does not properly manage objects during garbage collection. (CVE-2012-0745)

  - An error exists related to 'jsval', 'quickstubs', and compartmental mismatches that can lead potentially exploitable crashes. (CVE-2013-0746)

  - Errors exist related to events in the plugin handler that can allow same-origin policy bypass. (CVE-2013-0747)

  - An error related to the 'toString' method of XBL objects can lead to address information leakage. (CVE-2013-0748)

  - An unspecified memory corruption issue exists. (CVE-2013-0749, CVE-2013-0769, CVE-2013-0770)

  - A buffer overflow exists related to JavaScript string concatenation. (CVE-2013-0750)

  - An error exists related to multiple XML bindings with SVG content, contained in XBL files. (CVE-2013-0752)

  - A use-after-free error exists related to 'XMLSerializer' and 'serializeToStream'. (CVE-2013-0753)

  - A use-after-free error exists related to garbage collection and 'ListenManager'. (CVE-2013-0754)

  - A use-after-free error exists related to the 'Vibrate' library and 'domDoc'. (CVE-2013-0755)

  - A use-after-free error exists related to JavaScript 'Proxy' objects. (CVE-2013-0756)

  - 'Chrome Object Wrappers' (COW) can be bypassed by changing object prototypes and can allow arbitrary code execution. (CVE-2013-0757)

  - An error related to SVG elements and plugins can allow privilege escalation. (CVE-2013-0758)

  - An error exists related to the address bar that can allow URL spoofing attacks. (CVE-2013-0759)

  - An error exists related to SSL and threading that can result in potentially exploitable crashes. (CVE-2013-0764)

  - An error exists related to 'Canvas' and bad height or width values passed to it from HTML. (CVE-2013-0768)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
63551	Firefox < 18.0 多种漏洞	Nessus	Windows	2013/1/15	2019/12/4	critical
70183	GLSA-201309-23：Mozilla 产品：多种漏洞	Nessus	Gentoo Local Security Checks	2013/9/28	2022/3/29	critical
6668	Mozilla Firefox < 18.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2013/1/15	2019/3/6	high
6670	SeaMonkey 2.14.x < 2.15 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2013/1/15	2019/3/6	high
801376	Mozilla SeaMonkey 2.x <= 2.14 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2013/1/15		high
800108	Mozilla Firefox 17.x <= 17 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2013/1/15		high
801345	Mozilla Firefox 17.x <= 17 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2013/1/15		high

検出

プラグインの検索

critical

critical

high

high

high

high

high