CVE-2013-5595

2013-10-2900:00:00

ubuntu.com

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.011 Low

EPSS

Percentile

84.8%

JSON

The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x
before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird
ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly
allocate memory for unspecified functions, which allows remote attackers to
conduct buffer overflow attacks via a crafted web page.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchfirefox< 25.0+build3-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchfirefox< 25.0+build3-0ubuntu0.12.10.1UNKNOWN
ubuntu13.04noarchfirefox< 25.0+build3-0ubuntu0.13.04.1UNKNOWN
ubuntu13.10noarchfirefox< 25.0+build3-0ubuntu0.13.10.1UNKNOWN
ubuntu12.04noarchthunderbird< 1:24.1.0+build1-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchthunderbird< 1:24.1.0+build1-0ubuntu0.12.10.1UNKNOWN
ubuntu13.04noarchthunderbird< 1:24.1.0+build1-0ubuntu0.13.04.1UNKNOWN
ubuntu13.10noarchthunderbird< 1:24.1.0+build1-0ubuntu0.13.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	firefox	< 25.0+build3-0ubuntu0.12.04.1	UNKNOWN
ubuntu	12.10	noarch	firefox	< 25.0+build3-0ubuntu0.12.10.1	UNKNOWN
ubuntu	13.04	noarch	firefox	< 25.0+build3-0ubuntu0.13.04.1	UNKNOWN
ubuntu	13.10	noarch	firefox	< 25.0+build3-0ubuntu0.13.10.1	UNKNOWN
ubuntu	12.04	noarch	thunderbird	< 1:24.1.0+build1-0ubuntu0.12.04.1	UNKNOWN
ubuntu	12.10	noarch	thunderbird	< 1:24.1.0+build1-0ubuntu0.12.10.1	UNKNOWN
ubuntu	13.04	noarch	thunderbird	< 1:24.1.0+build1-0ubuntu0.13.04.1	UNKNOWN
ubuntu	13.10	noarch	thunderbird	< 1:24.1.0+build1-0ubuntu0.13.10.1	UNKNOWN