Security Vulnerabilities fixed in Firefox ESR 24.1

Description

Security researcher Nils used the Address Sanitizer tool while fuzzing to discover missing strong references in browsing engine leading to use-after-frees. This can lead to a potentially exploitable crash.

Affected Applications

Firefox ESR

CVE References

CVE-2013-1739 CVE-2013-5590 CVE-2013-5591 CVE-2013-5592 CVE-2013-5599 CVE-2013-5600 CVE-2013-5601

Other References

https://www.mozilla.org/en-US/security/advisories/mfsa2013-100