CVE-2013-1708

Published: 6 August 2013

Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (application crash) via a crafted WAV file that is not properly handled by the nsCString::CharAt function.

Status

References

• http://www.mozilla.org/security/announce/2013/mfsa2013-67.html
• https://ubuntu.com/security/notices/USN-1924-1
• https://www.cve.org/CVERecord?id=CVE-2013-1708
• NVD
• Launchpad
• Debian