CVE-2013-5607
Summary
| CVE | CVE-2013-5607 |
|---|---|
| State | PUBLISHED |
| Assigner | mozilla |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2013-11-20 14:12:50 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11 and 24.x before 24.1.1, and SeaMonkey before 2.22.1, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted X.509 certificate, a related issue to CVE-2013-1741. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mozilla | Firefox | 17.0 | All | All | All |
| Application | Mozilla | Firefox | 17.0.1 | All | All | All |
| Application | Mozilla | Firefox | 17.0.10 | All | All | All |
| Application | Mozilla | Firefox | 17.0.2 | All | All | All |
| Application | Mozilla | Firefox | 17.0.3 | All | All | All |
| Application | Mozilla | Firefox | 17.0.4 | All | All | All |
| Application | Mozilla | Firefox | 17.0.5 | All | All | All |
| Application | Mozilla | Firefox | 17.0.6 | All | All | All |
| Application | Mozilla | Firefox | 17.0.7 | All | All | All |
| Application | Mozilla | Firefox | 17.0.8 | All | All | All |
| Application | Mozilla | Firefox | 17.0.9 | All | All | All |
| Application | Mozilla | Firefox | 19.0 | All | All | All |
| Application | Mozilla | Firefox | 19.0.1 | All | All | All |
| Application | Mozilla | Firefox | 19.0.2 | All | All | All |
| Application | Mozilla | Firefox | 20.0 | All | All | All |
| Application | Mozilla | Firefox | 20.0.1 | All | All | All |
| Application | Mozilla | Firefox | 21.0 | All | All | All |
| Application | Mozilla | Firefox | 22.0 | All | All | All |
| Application | Mozilla | Firefox | 23.0 | All | All | All |
| Application | Mozilla | Firefox | 23.0.1 | All | All | All |
| Application | Mozilla | Firefox | 24.0 | All | All | All |
| Application | Mozilla | Firefox | 24.0.1 | All | All | All |
| Application | Mozilla | Firefox | 24.0.2 | All | All | All |
| Application | Mozilla | Firefox | All | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.1.1 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.1.2 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.10 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.2 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.2.2 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.3 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.4.1 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.5.1 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.6 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.6.1 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.6.2 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.6.3 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.6.4 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.6.5 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.6.6 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.6.7 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.6.8 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.7 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.7.1 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.7.2 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.7.3 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.7.4 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.7.5 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.7.6 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.8 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.8.2 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.8.3 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.8.4 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.8.5 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.8.6 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.8.7 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.8.8 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.8.9 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.9 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.9.1 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.9.2 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.9.3 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.9.4 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.9.5 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | 4.9.6 | All | All | All |
| Application | Mozilla | Netscape Portable Runtime | All | All | All | All |
| Application | Mozilla | Seamonkey | 2.0 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0 | alpha_1 | All | All |
| Application | Mozilla | Seamonkey | 2.0 | alpha_2 | All | All |
| Application | Mozilla | Seamonkey | 2.0 | alpha_3 | All | All |
| Application | Mozilla | Seamonkey | 2.0 | beta_1 | All | All |
| Application | Mozilla | Seamonkey | 2.0 | beta_2 | All | All |
| Application | Mozilla | Seamonkey | 2.0 | rc1 | All | All |
| Application | Mozilla | Seamonkey | 2.0 | rc2 | All | All |
| Application | Mozilla | Seamonkey | 2.0.1 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.10 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.11 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.12 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.13 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.14 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.2 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.3 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.4 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.5 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.6 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.7 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.8 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.9 | All | All | All |
| Application | Mozilla | Seamonkey | 2.1 | All | All | All |
| Application | Mozilla | Seamonkey | 2.1 | alpha1 | All | All |
| Application | Mozilla | Seamonkey | 2.1 | alpha2 | All | All |
| Application | Mozilla | Seamonkey | 2.1 | alpha3 | All | All |
| Application | Mozilla | Seamonkey | 2.1 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.1 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.1 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.1 | rc1 | All | All |
| Application | Mozilla | Seamonkey | 2.1 | rc2 | All | All |
| Application | Mozilla | Seamonkey | 2.10 | All | All | All |
| Application | Mozilla | Seamonkey | 2.10 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.10 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.10 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.10.1 | All | All | All |
| Application | Mozilla | Seamonkey | 2.11 | All | All | All |
| Application | Mozilla | Seamonkey | 2.11 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.11 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.11 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.11 | beta4 | All | All |
| Application | Mozilla | Seamonkey | 2.11 | beta5 | All | All |
| Application | Mozilla | Seamonkey | 2.11 | beta6 | All | All |
| Application | Mozilla | Seamonkey | 2.12 | All | All | All |
| Application | Mozilla | Seamonkey | 2.12 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.12 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.12 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.12 | beta4 | All | All |
| Application | Mozilla | Seamonkey | 2.12 | beta5 | All | All |
| Application | Mozilla | Seamonkey | 2.12 | beta6 | All | All |
| Application | Mozilla | Seamonkey | 2.12.1 | All | All | All |
| Application | Mozilla | Seamonkey | 2.13 | All | All | All |
| Application | Mozilla | Seamonkey | 2.13 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.13 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.13 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.13 | beta4 | All | All |
| Application | Mozilla | Seamonkey | 2.13 | beta5 | All | All |
| Application | Mozilla | Seamonkey | 2.13 | beta6 | All | All |
| Application | Mozilla | Seamonkey | 2.13.1 | All | All | All |
| Application | Mozilla | Seamonkey | 2.13.2 | All | All | All |
| Application | Mozilla | Seamonkey | 2.14 | All | All | All |
| Application | Mozilla | Seamonkey | 2.14 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.14 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.14 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.14 | beta4 | All | All |
| Application | Mozilla | Seamonkey | 2.14 | beta5 | All | All |
| Application | Mozilla | Seamonkey | 2.15 | All | All | All |
| Application | Mozilla | Seamonkey | 2.15 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.15 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.15 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.15 | beta4 | All | All |
| Application | Mozilla | Seamonkey | 2.15 | beta5 | All | All |
| Application | Mozilla | Seamonkey | 2.15 | beta6 | All | All |
| Application | Mozilla | Seamonkey | 2.15.1 | All | All | All |
| Application | Mozilla | Seamonkey | 2.15.2 | All | All | All |
| Application | Mozilla | Seamonkey | 2.16 | All | All | All |
| Application | Mozilla | Seamonkey | 2.16 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.16 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.16 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.16 | beta4 | All | All |
| Application | Mozilla | Seamonkey | 2.16 | beta5 | All | All |
| Application | Mozilla | Seamonkey | 2.16.1 | All | All | All |
| Application | Mozilla | Seamonkey | 2.16.2 | All | All | All |
| Application | Mozilla | Seamonkey | 2.17 | All | All | All |
| Application | Mozilla | Seamonkey | 2.17 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.17 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.17 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.17 | beta4 | All | All |
| Application | Mozilla | Seamonkey | 2.17.1 | All | All | All |
| Application | Mozilla | Seamonkey | 2.18 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.18 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.18 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.18 | beta4 | All | All |
| Application | Mozilla | Seamonkey | 2.19 | All | All | All |
| Application | Mozilla | Seamonkey | 2.19 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.19 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.20 | All | All | All |
| Application | Mozilla | Seamonkey | 2.20 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.20 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.20 | beta3 | All | All |
| Application | Mozilla | Seamonkey | 2.21 | All | All | All |
| Application | Mozilla | Seamonkey | 2.21 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.21 | beta2 | All | All |
| Application | Mozilla | Seamonkey | 2.22 | beta1 | All | All |
| Application | Mozilla | Seamonkey | 2.22 | beta2 | All | All |
| Application | Mozilla | Seamonkey | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 2016-10 Security Bulletin: CTPView: Multiple vulnerabilities in CTPView - Juniper Networks | af854a3a-2127-422b-91ae-364da2661108 | kb.juniper.net | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| [security-announce] SUSE-SU-2013:1807-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| openSUSE-SU-2013:1732-1: moderate: update for mozilla-nss | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| Gentoo Security | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| Oracle VM Server for x86 Bulletin - July 2016 | af854a3a-2127-422b-91ae-364da2661108 | www.oracle.com | |
| USN-2032-1: Thunderbird vulnerabilities | Ubuntu | af854a3a-2127-422b-91ae-364da2661108 | www.ubuntu.com | |
| Access Denied | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.mozilla.org | |
| groups.google.com/forum/message/raw | af854a3a-2127-422b-91ae-364da2661108 | groups.google.com | |
| Gentoo Linux Documentation -- Mozilla Network Security Service: Multiple vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| Debian -- Security Information -- DSA-2820-1 nspr | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| MFSA 2013-103: Miscellaneous Network Security Services (NSS) vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.mozilla.org | Vendor Advisory |
| Mozilla Netscape Portable Runtime CVE-2013-5607 Integer Overflow Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| USN-2087-1: NSPR vulnerability | Ubuntu | af854a3a-2127-422b-91ae-364da2661108 | www.ubuntu.com | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| USN-2031-1: Firefox vulnerabilities | Ubuntu | af854a3a-2127-422b-91ae-364da2661108 | www.ubuntu.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.