NVD

Id
37873  
Name
CVE-2013-1710  
Description
The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to execute arbitrary JavaScript code or conduct cross-site scripting (XSS) attacks via vectors related to Certificate Request Message Format (CRMF) request generation.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-08-06  
Modified Date
2017-01-06  
Seq
2013-1710  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
193067 37873 CVE-2013-1710 oval:org.mitre.oval:def:18773  View
193068 37873 CVE-2013-1710 DSA-2735  View
193069 37873 CVE-2013-1710 DSA-2746  View
193070 37873 CVE-2013-1710 http://www.mozilla.org/security/announce/2013/mfsa2013-69.html  View
193071 37873 CVE-2013-1710 61900  View
193072 37873 CVE-2013-1710 https://bugzilla.mozilla.org/show_bug.cgi?id=871368  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22098 JVNDB-2013-003673 複数の Mozilla 製品の crypto.generateCRMFRequest 関数における任意の JavaScript コードを実行される脆弱性 複数の Mozilla 製品の crypto.generateCRMFRequest 関数には、Certificate Request Message Format (CRMF) リクエストの生成に関する処理に不備があるため、任意の JavaScript コードを実行される脆弱性が存在します。 CVE-2013-1710 61652 CVE-2013-1710 37873 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003673.html 2013-08-06 2013-10-29 View