{
  "threat_severity" : "Moderate",
  "public_date" : "2013-09-17T00:00:00Z",
  "bugzilla" : {
    "description" : "Mozilla: Uninitialized data in IonMonkey (MFSA 2013-85)",
    "id" : "1009217",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1009217"
  },
  "cvss" : {
    "cvss_base_score" : "4.3",
    "cvss_scoring_vector" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
    "status" : "draft"
  },
  "details" : [ "The IonMonkey JavaScript engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21, when Valgrind mode is used, does not properly initialize memory, which makes it easier for remote attackers to obtain sensitive information via unspecified vectors." ],
  "statement" : "This issue does not affect the version of firefox and thunderbird as shipped with Red Hat Enterprise Linux 5 and 6",
  "acknowledgement" : "Red Hat would like to thank Mozilla project for reporting this issue.",
  "package_state" : [ {
    "product_name" : "Red Hat Enterprise Linux 5",
    "fix_state" : "Not affected",
    "package_name" : "firefox",
    "cpe" : "cpe:/o:redhat:enterprise_linux:5"
  }, {
    "product_name" : "Red Hat Enterprise Linux 5",
    "fix_state" : "Not affected",
    "package_name" : "thunderbird",
    "cpe" : "cpe:/o:redhat:enterprise_linux:5"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6",
    "fix_state" : "Not affected",
    "package_name" : "firefox",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6",
    "fix_state" : "Not affected",
    "package_name" : "thunderbird",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2013-1728\nhttps://nvd.nist.gov/vuln/detail/CVE-2013-1728\nhttp://www.mozilla.org/security/announce/2013/mfsa2013-85.html" ],
  "name" : "CVE-2013-1728",
  "csaw" : false
}