Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17392
https://bugzilla.mozilla.org/show_bug.cgi?id=867482
https://bugzilla.mozilla.org/show_bug.cgi?id=862309
https://bugzilla.mozilla.org/show_bug.cgi?id=840098
https://bugzilla.mozilla.org/show_bug.cgi?id=830389
http://www.ubuntu.com/usn/USN-1891-1
http://www.ubuntu.com/usn/USN-1890-1
http://www.securityfocus.com/bid/60765
http://www.mozilla.org/security/announce/2013/mfsa2013-49.html
http://www.debian.org/security/2013/dsa-2720
http://www.debian.org/security/2013/dsa-2716
http://rhn.redhat.com/errata/RHSA-2013-0982.html
http://rhn.redhat.com/errata/RHSA-2013-0981.html
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html