CVE-2013-5595

Mozilla: Improperly initialized memory and overflows in some JavaScript functions (MFSA 2013-96)

Published Oct 30, 2013 CVSS 2.0 · 4.3 Medium EPSS 2.1% KEV · Not listed
Description
The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly allocate memory for unspecified functions, which allows remote attackers to conduct buffer overflow attacks via a crafted web page.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2788-1 iceweasel security update
Debian DSA Debian DSA DSA-2797-1 icedove security update
EUVD EUVD EUVD-2013-5435 The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly allocate memory for unspecified functions, which allows remote attackers to conduct buffer overflow attacks via a crafted web page.
Ubuntu USN Ubuntu USN USN-2009-1 Firefox vulnerabilities
Ubuntu USN Ubuntu USN USN-2010-1 Thunderbird vulnerabilities
History
Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:24.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:24.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:24.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:24.0.2:*:*:*:*:*:*:*
Vendors & Products Mozilla firefox Esr
Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:17.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:17.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:24.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:17.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:17.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:24.0:*:*:*:*:*:*:*
Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:17.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:17.0.3:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:17.0.4:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:17.0.5:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:17.0.6:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:17.0.7:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:17.0.8:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:17.0.9:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:17.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:17.0.3:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:17.0.4:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:17.0.5:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:17.0.6:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:17.0.7:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:17.0.8:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:17.0.9:*:*:*:*:*:*:*
Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

Sources

Status
PUBLISHED
Assigner
mozilla
Published
Updated
Aug 6, 2024, 5:15 PM
Reserved
Aug 26, 2013, 12:00 AM
Status
Modified
Published
Oct 30, 2013, 10:55 AM
Modified
Jun 16, 2026, 11:59 PM
Severity
Moderate
Public date
Oct 29, 2013, 12:00 AM