Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-5607
HistoryNov 20, 2013 - 12:00 a.m.

CVE-2013-5607

2013-11-2000:00:00
ubuntu.com
ubuntu.com
12

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.101 Low

EPSS

Percentile

95.0%

Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape
Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1,
Firefox ESR 17.x before 17.0.11 and 24.x before 24.1.1, and SeaMonkey
before 2.22.1, allows remote attackers to cause a denial of service
(application crash) or possibly have unspecified other impact via a crafted
X.509 certificate, a related issue to CVE-2013-1741.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchfirefox< 25.0.1+build1-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchfirefox< 25.0.1+build1-0ubuntu0.12.10.1UNKNOWN
ubuntu13.04noarchfirefox< 25.0.1+build1-0ubuntu0.13.04.1UNKNOWN
ubuntu13.10noarchfirefox< 25.0.1+build1-0ubuntu0.13.10.1UNKNOWN
ubuntu10.04noarchnspr< 4.9.5-0ubuntu0.10.04.2UNKNOWN
ubuntu12.04noarchnspr< 4.9.5-0ubuntu0.12.04.2UNKNOWN
ubuntu12.10noarchnspr< 4.9.5-0ubuntu0.12.10.2UNKNOWN
ubuntu13.10noarchnspr< 2:4.9.5-1ubuntu1.1UNKNOWN
ubuntu12.04noarchthunderbird< 1:24.1.1+build1-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchthunderbird< 1:24.1.1+build1-0ubuntu0.12.10.1UNKNOWN
Rows per page:
1-10 of 121

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.101 Low

EPSS

Percentile

95.0%