NVD

Id
40878  
Name
CVE-2013-5604  
Description
The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly initialize data, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via crafted documents.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-10-30  
Modified Date
2016-12-21  
Seq
2013-5604  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
206567 40878 CVE-2013-5604 openSUSE-SU-2013:1633  View
206568 40878 CVE-2013-5604 openSUSE-SU-2013:1634  View
206569 40878 CVE-2013-5604 SUSE-SU-2013:1678  View
206570 40878 CVE-2013-5604 oval:org.mitre.oval:def:19091  View
206571 40878 CVE-2013-5604 RHSA-2013:1476  View
206572 40878 CVE-2013-5604 RHSA-2013:1480  View
206573 40878 CVE-2013-5604 DSA-2788  View
206574 40878 CVE-2013-5604 DSA-2797  View
206575 40878 CVE-2013-5604 http://www.mozilla.org/security/announce/2013/mfsa2013-95.html  View
206576 40878 CVE-2013-5604 https://bugzilla.mozilla.org/show_bug.cgi?id=914017  View
206577 40878 CVE-2013-5604 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23382 JVNDB-2013-004957 複数の Mozilla 製品の XSLT プロセッサにおける任意のコードを実行される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の XSLT プロセッサの txXPathNodeUtils::getBaseURI 関数は、データを適切に初期化しないため、任意のコードを実行される、またはサービス運用妨害 (スタックベースのバッファオーバーフローおよびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2013-5604 65546 CVE-2013-5604 40878 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004957.html 2013-10-29 2013-12-05 View