CVE

Id
65551  
CVE No.
CVE-2013-5604  
Status
Candidate  
Description
The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly initialize data, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via crafted documents.  
Phase
Assigned (20130826)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
639486 65551 CVE-2013-5604 CONFIRM:http://www.mozilla.org/security/announce/2013/mfsa2013-95.html  View
639487 65551 CVE-2013-5604 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=914017  View
639488 65551 CVE-2013-5604 DEBIAN:DSA-2788  View
639489 65551 CVE-2013-5604 URL:http://www.debian.org/security/2013/dsa-2788  View
639490 65551 CVE-2013-5604 DEBIAN:DSA-2797  View
639491 65551 CVE-2013-5604 URL:http://www.debian.org/security/2013/dsa-2797  View
639492 65551 CVE-2013-5604 GENTOO:GLSA-201504-01  View
639493 65551 CVE-2013-5604 URL:https://security.gentoo.org/glsa/201504-01  View
639494 65551 CVE-2013-5604 REDHAT:RHSA-2013:1476  View
639495 65551 CVE-2013-5604 URL:http://rhn.redhat.com/errata/RHSA-2013-1476.html  View
639496 65551 CVE-2013-5604 REDHAT:RHSA-2013:1480  View
639497 65551 CVE-2013-5604 URL:http://rhn.redhat.com/errata/RHSA-2013-1480.html  View
639498 65551 CVE-2013-5604 SUSE:openSUSE-SU-2013:1634  View
639499 65551 CVE-2013-5604 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html  View
639500 65551 CVE-2013-5604 SUSE:SUSE-SU-2013:1678  View
639501 65551 CVE-2013-5604 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html  View
639502 65551 CVE-2013-5604 SUSE:openSUSE-SU-2013:1633  View
639503 65551 CVE-2013-5604 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html  View
639504 65551 CVE-2013-5604 OVAL:oval:org.mitre.oval:def:19091  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23901 JVNDB-2013-005476 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey のブラウザエンジンには、サービス運用妨害 (メモリ破損およびアプリケーションクラッシュ) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2013-5609 65551 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005476.html  View