Lucene search
Mozilla FoundationMFSA2013-65HistoryAug 06, 2013 - 12:00 a.m.
Buffer underflow when generating CRMF requests — Mozilla
2013-08-0600:00:00
Mozilla Foundation
www.mozilla.org
15
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.06 Low
EPSS
Percentile
93.5%
Security researcher Nils used the Address Sanitizer to discover a use-after-free problem when generating a Certificate Request Message Format (CRMF) request with certain parameters. This causes a potentially exploitable crash.
Affected configurations
Node
mozillafirefoxRange<17.0.9
ORmozillafirefoxRange<23
ORmozillaseamonkeyRange<2.20
Related
cve
cve
CVE-2013-1705
2013-08-07 01:55:04
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-65) - Linux
2021-11-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:1497-1)
2021-06-09 00:00:00
Mozilla SeaMonkey Multiple Vulnerabilities - August 13 (Windows)
2013-08-08 00:00:00
cvelist
cvelist
CVE-2013-1705
2013-08-07 01:00:00
ubuntucve
ubuntucve
CVE-2013-1705
2013-08-06 00:00:00
nvd
nvd
CVE-2013-1705
2013-08-07 01:55:04
prion
prion
Heap overflow
2013-08-07 01:55:00
nessus
nessus
openSUSE Security Update : xulrunner17 (openSUSE-SU-2013:1496-1)
2014-06-13 00:00:00
SuSE 11.2 / 11.3 Security Update : Mozilla Firefox (SAT Patch Numbers 8344 / 8346)
2013-09-28 00:00:00
Firefox < 23.0 Multiple Vulnerabilities (Mac OS X)
2013-08-08 00:00:00
suse
suse
Security update for Mozilla Firefox (important)
2013-09-27 22:04:14
update for MozillaFirefox, MozillaThunderbird, mozilla-nspr, mozilla-nss, seamonkey, xulrunner (important)
2013-08-16 15:04:27
Mozilla updates August 2013 (important)
2013-08-14 03:05:38
ubuntu
ubuntu
Ubufox and Unity Firefox Extension update
2013-08-06 00:00:00
Firefox vulnerabilities
2013-08-06 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-08-06 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-08-12 00:00:00
mageia
mageia
Updated iceape packages fix many vulnerabilities
2013-11-21 00:16:49
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-09-27 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.06 Low
EPSS
Percentile
93.5%
Related for MFSA2013-65