CVEvulnerability
CVE-2013-5595
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-10-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-119
Description
The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly allocate memory for unspecified functions, which allows remote attackers to conduct buffer overflow attacks via a crafted web page.
Affected configurations
• mozilla thunderbird esr 17.0
• mozilla thunderbird esr 17.0.1
• mozilla thunderbird esr 17.0.2
• mozilla thunderbird esr 17.0.3
• mozilla thunderbird esr 17.0.4
• mozilla thunderbird esr 17.0.5
• mozilla thunderbird esr 17.0.6
• mozilla thunderbird esr 17.0.7
• mozilla thunderbird esr 17.0.8
• mozilla thunderbird esr 17.0.9
• mozilla firefox (<= 24.0)
• mozilla firefox 19.0
• mozilla firefox 19.0.1
• mozilla firefox 19.0.2
• mozilla firefox 20.0
• mozilla firefox 20.0.1
• mozilla firefox 21.0
• mozilla firefox 22.0
• mozilla firefox 23.0
• mozilla firefox 23.0.1
• mozilla seamonkey (<= 2.22)
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla seamonkey 2.0.4
• mozilla seamonkey 2.0.5
• mozilla seamonkey 2.0.6
• mozilla seamonkey 2.0.7
• mozilla seamonkey 2.0.8
• mozilla seamonkey 2.0.9
• mozilla seamonkey 2.0.10
• mozilla seamonkey 2.0.11
• mozilla seamonkey 2.0.12
• mozilla seamonkey 2.0.13
• mozilla seamonkey 2.0.14
• mozilla seamonkey 2.1
• mozilla seamonkey 2.10
• mozilla seamonkey 2.10.1
• mozilla seamonkey 2.11
• mozilla seamonkey 2.12
• mozilla seamonkey 2.12.1
• mozilla seamonkey 2.13
• mozilla seamonkey 2.13.1
• mozilla seamonkey 2.13.2
• mozilla seamonkey 2.14
• mozilla seamonkey 2.15
• mozilla seamonkey 2.15.1
• mozilla seamonkey 2.15.2
• mozilla seamonkey 2.16
• mozilla seamonkey 2.16.1
• mozilla seamonkey 2.16.2
• mozilla seamonkey 2.17
• mozilla seamonkey 2.17.1
• mozilla seamonkey 2.18
• mozilla seamonkey 2.19
• mozilla seamonkey 2.20
• mozilla seamonkey 2.21
• mozilla seamonkey 2.22
• mozilla firefox 17.0
… and 23 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2013-1476.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1480.html rhn.redhat.com
- http://www.debian.org/security/2013/dsa-2788 www.debian.org
- http://www.debian.org/security/2013/dsa-2797 www.debian.org
- http://www.mozilla.org/security/announce/2013/mfsa2013-96.html Vendor Advisory
- http://www.securityfocus.com/bid/63421 www.securityfocus.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=916580 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18694 oval.cisecurity.org
- https://security.gentoo.org/glsa/201504-01 security.gentoo.org
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2013-1476.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1480.html rhn.redhat.com
- http://www.debian.org/security/2013/dsa-2788 www.debian.org
- http://www.debian.org/security/2013/dsa-2797 www.debian.org
- http://www.mozilla.org/security/announce/2013/mfsa2013-96.html Vendor Advisory
- http://www.securityfocus.com/bid/63421 www.securityfocus.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=916580 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18694 oval.cisecurity.org
- https://security.gentoo.org/glsa/201504-01 security.gentoo.org