CVE-2013-5590

Mozilla Firefox <25.0 - Memory Corruption

Title source: llm
STIX 2.1

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References (12)

Core 12
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1480.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1476.html
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=860123
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=893572
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19001
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201504-01
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2013/dsa-2788
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2013/dsa-2797

Scores

EPSS 0.0524
EPSS Percentile 91.6%

Details

Status published
Products (39)
mozilla/firefox 17.0
mozilla/firefox 17.0.1
mozilla/firefox 17.0.2
mozilla/firefox 17.0.3
mozilla/firefox 17.0.4
mozilla/firefox 17.0.5
mozilla/firefox 17.0.6
mozilla/firefox 17.0.7
mozilla/firefox 17.0.8
mozilla/firefox 17.0.9
... and 29 more
Published Oct 30, 2013
Tracked Since Feb 18, 2026