NVD

Id
40881  
Name
CVE-2013-5607  
Description
Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11 and 24.x before 24.1.1, and SeaMonkey before 2.22.1, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted X.509 certificate, a related issue to CVE-2013-1741.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-11-20  
Modified Date
2016-12-30  
Seq
2013-5607  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
206626 40881 CVE-2013-5607 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761  View
206627 40881 CVE-2013-5607 SUSE-SU-2013:1807  View
206628 40881 CVE-2013-5607 openSUSE-SU-2013:1732  View
206629 40881 CVE-2013-5607 RHSA-2013:1791  View
206630 40881 CVE-2013-5607 RHSA-2013:1829  View
206631 40881 CVE-2013-5607 GLSA-201406-19  View
206632 40881 CVE-2013-5607 http://www.mozilla.org/security/announce/2013/mfsa2013-103.html  View
206633 40881 CVE-2013-5607 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
206634 40881 CVE-2013-5607 63802  View
206635 40881 CVE-2013-5607 USN-2031-1  View
206636 40881 CVE-2013-5607 USN-2032-1  View
206637 40881 CVE-2013-5607 USN-2087-1  View
206638 40881 CVE-2013-5607 https://bugzilla.mozilla.org/show_bug.cgi?id=927687  View
206639 40881 CVE-2013-5607 [dev-tech-nspr] 20131113 [ANNOUNCE] NSPR 4.10.2 Release  View
206640 40881 CVE-2013-5607 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23632 JVNDB-2013-005207 Mozilla Firefox および SeaMonkey で使用される Mozilla Netscape Portable Runtime における整数オーバーフローの脆弱性 Mozilla Firefox および SeaMonkey で使用される Mozilla Netscape Portable Runtime (NSPR) の PL_ArenaAllocate 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2013-5607 65549 CVE-2013-5607 40881 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005207.html 2013-11-15 2014-03-10 View