CVEvulnerability
CVE-2013-0791
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-04-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-119
Description
The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.
Affected configurations
• mozilla firefox (<= 20.0)
• mozilla firefox (>= 17.0 < 17.0.5)
• mozilla network security services (< 3.15)
• mozilla seamonkey (< 2.17)
• mozilla thunderbird (< 17.0.5)
• mozilla thunderbird esr (>= 17.0 < 17.0.5)
• canonical ubuntu linux 10.04
• canonical ubuntu linux 11.10
• canonical ubuntu linux 12.04
• canonical ubuntu linux 12.10
• oracle vm server 3.2
• redhat enterprise linux desktop 5.0
• redhat enterprise linux desktop 6.0
• redhat enterprise linux eus 5.9
• redhat enterprise linux server 5.0
• redhat enterprise linux server 6.0
• redhat enterprise linux server aus 5.9
• redhat enterprise linux workstation 5.0
• redhat enterprise linux workstation 6.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html Broken Link
- http://rhn.redhat.com/errata/RHSA-2013-1135.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1144.html Third Party Advisory
- http://www.mozilla.org/security/announce/2013/mfsa2013-40.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html Third Party Advisory
- http://www.securityfocus.com/bid/58826 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1791-1 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=629816 Issue Tracking, Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17150 Broken Link
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html Broken Link
- http://rhn.redhat.com/errata/RHSA-2013-1135.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1144.html Third Party Advisory
- http://www.mozilla.org/security/announce/2013/mfsa2013-40.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html Third Party Advisory
- http://www.securityfocus.com/bid/58826 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1791-1 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=629816 Issue Tracking, Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17150 Broken Link