4.3

CVE-2013-5595

The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly allocate memory for unspecified functions, which allows remote attackers to conduct buffer overflow attacks via a crafted web page.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
MozillaThunderbird Esr Version17.0
MozillaThunderbird Esr Version17.0.1
MozillaThunderbird Esr Version17.0.2
MozillaThunderbird Esr Version17.0.3
MozillaThunderbird Esr Version17.0.4
MozillaThunderbird Esr Version17.0.5
MozillaThunderbird Esr Version17.0.6
MozillaThunderbird Esr Version17.0.7
MozillaThunderbird Esr Version17.0.8
MozillaThunderbird Esr Version17.0.9
MozillaFirefox Version <= 24.0
MozillaFirefox Version19.0
MozillaFirefox Version19.0.1
MozillaFirefox Version19.0.2
MozillaFirefox Version20.0
MozillaFirefox Version20.0.1
MozillaFirefox Version21.0
MozillaFirefox Version22.0
MozillaFirefox Version23.0
MozillaFirefox Version23.0.1
MozillaSeamonkey Updatebeta2 Version <= 2.22
MozillaSeamonkey Version2.0
MozillaSeamonkey Version2.0 Updatealpha_1
MozillaSeamonkey Version2.0 Updatealpha_2
MozillaSeamonkey Version2.0 Updatealpha_3
MozillaSeamonkey Version2.0 Updatebeta_1
MozillaSeamonkey Version2.0 Updatebeta_2
MozillaSeamonkey Version2.0 Updaterc1
MozillaSeamonkey Version2.0 Updaterc2
MozillaSeamonkey Version2.0.1
MozillaSeamonkey Version2.0.2
MozillaSeamonkey Version2.0.3
MozillaSeamonkey Version2.0.4
MozillaSeamonkey Version2.0.5
MozillaSeamonkey Version2.0.6
MozillaSeamonkey Version2.0.7
MozillaSeamonkey Version2.0.8
MozillaSeamonkey Version2.0.9
MozillaSeamonkey Version2.0.10
MozillaSeamonkey Version2.0.11
MozillaSeamonkey Version2.0.12
MozillaSeamonkey Version2.0.13
MozillaSeamonkey Version2.0.14
MozillaSeamonkey Version2.1
MozillaSeamonkey Version2.1 Updatealpha1
MozillaSeamonkey Version2.1 Updatealpha2
MozillaSeamonkey Version2.1 Updatealpha3
MozillaSeamonkey Version2.1 Updatebeta1
MozillaSeamonkey Version2.1 Updatebeta2
MozillaSeamonkey Version2.1 Updatebeta3
MozillaSeamonkey Version2.1 Updaterc1
MozillaSeamonkey Version2.1 Updaterc2
MozillaSeamonkey Version2.10
MozillaSeamonkey Version2.10 Updatebeta1
MozillaSeamonkey Version2.10 Updatebeta2
MozillaSeamonkey Version2.10 Updatebeta3
MozillaSeamonkey Version2.10.1
MozillaSeamonkey Version2.11
MozillaSeamonkey Version2.11 Updatebeta1
MozillaSeamonkey Version2.11 Updatebeta2
MozillaSeamonkey Version2.11 Updatebeta3
MozillaSeamonkey Version2.11 Updatebeta4
MozillaSeamonkey Version2.11 Updatebeta5
MozillaSeamonkey Version2.11 Updatebeta6
MozillaSeamonkey Version2.12
MozillaSeamonkey Version2.12 Updatebeta1
MozillaSeamonkey Version2.12 Updatebeta2
MozillaSeamonkey Version2.12 Updatebeta3
MozillaSeamonkey Version2.12 Updatebeta4
MozillaSeamonkey Version2.12 Updatebeta5
MozillaSeamonkey Version2.12 Updatebeta6
MozillaSeamonkey Version2.12.1
MozillaSeamonkey Version2.13
MozillaSeamonkey Version2.13 Updatebeta1
MozillaSeamonkey Version2.13 Updatebeta2
MozillaSeamonkey Version2.13 Updatebeta3
MozillaSeamonkey Version2.13 Updatebeta4
MozillaSeamonkey Version2.13 Updatebeta5
MozillaSeamonkey Version2.13 Updatebeta6
MozillaSeamonkey Version2.13.1
MozillaSeamonkey Version2.13.2
MozillaSeamonkey Version2.14
MozillaSeamonkey Version2.14 Updatebeta1
MozillaSeamonkey Version2.14 Updatebeta2
MozillaSeamonkey Version2.14 Updatebeta3
MozillaSeamonkey Version2.14 Updatebeta4
MozillaSeamonkey Version2.14 Updatebeta5
MozillaSeamonkey Version2.15
MozillaSeamonkey Version2.15 Updatebeta1
MozillaSeamonkey Version2.15 Updatebeta2
MozillaSeamonkey Version2.15 Updatebeta3
MozillaSeamonkey Version2.15 Updatebeta4
MozillaSeamonkey Version2.15 Updatebeta5
MozillaSeamonkey Version2.15 Updatebeta6
MozillaSeamonkey Version2.15.1
MozillaSeamonkey Version2.15.2
MozillaSeamonkey Version2.16
MozillaSeamonkey Version2.16 Updatebeta1
MozillaSeamonkey Version2.16 Updatebeta2
MozillaSeamonkey Version2.16 Updatebeta3
MozillaSeamonkey Version2.16 Updatebeta4
MozillaSeamonkey Version2.16 Updatebeta5
MozillaSeamonkey Version2.16.1
MozillaSeamonkey Version2.16.2
MozillaSeamonkey Version2.17
MozillaSeamonkey Version2.17 Updatebeta1
MozillaSeamonkey Version2.17 Updatebeta2
MozillaSeamonkey Version2.17 Updatebeta3
MozillaSeamonkey Version2.17 Updatebeta4
MozillaSeamonkey Version2.17.1
MozillaSeamonkey Version2.18 Updatebeta1
MozillaSeamonkey Version2.18 Updatebeta2
MozillaSeamonkey Version2.18 Updatebeta3
MozillaSeamonkey Version2.18 Updatebeta4
MozillaSeamonkey Version2.19
MozillaSeamonkey Version2.19 Updatebeta1
MozillaSeamonkey Version2.19 Updatebeta2
MozillaSeamonkey Version2.20
MozillaSeamonkey Version2.20 Updatebeta1
MozillaSeamonkey Version2.20 Updatebeta2
MozillaSeamonkey Version2.20 Updatebeta3
MozillaSeamonkey Version2.21 Updatebeta1
MozillaSeamonkey Version2.21 Updatebeta2
MozillaSeamonkey Version2.22 Updatebeta1
MozillaFirefox Version17.0
MozillaFirefox Version17.0.1
MozillaFirefox Version17.0.2
MozillaFirefox Version17.0.3
MozillaFirefox Version17.0.4
MozillaFirefox Version17.0.5
MozillaFirefox Version17.0.6
MozillaFirefox Version17.0.7
MozillaFirefox Version17.0.8
MozillaFirefox Version17.0.9
MozillaFirefox Version24.0
MozillaFirefox ESR Version24.0.1
MozillaFirefox ESR Version24.0.2
MozillaThunderbird Version <= 24.0.1
MozillaThunderbird Version17.0
MozillaThunderbird Version17.0.1
MozillaThunderbird Version17.0.2
MozillaThunderbird Version17.0.3
MozillaThunderbird Version17.0.4
MozillaThunderbird Version17.0.5
MozillaThunderbird Version17.0.6
MozillaThunderbird Version17.0.7
MozillaThunderbird Version17.0.8
MozillaThunderbird Version24.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.93% 0.826
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.