QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2013-5607

Back to search

CVE-2013-5607

Published: Nov 20, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11 and 24.x before 24.1.1, and SeaMonkey before 2.22.1, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted X.509 certificate, a related issue to CVE-2013-1741.

VendorProductVersions

n/a

n/a

affected
n/a

References

DSA-2820
vendor-advisory
x_refsource_DEBIAN
GLSA-201504-01
vendor-advisory
x_refsource_GENTOO
USN-2087-1
vendor-advisory
x_refsource_UBUNTU
GLSA-201406-19
vendor-advisory
x_refsource_GENTOO
USN-2031-1
vendor-advisory
x_refsource_UBUNTU
USN-2032-1
vendor-advisory
x_refsource_UBUNTU
RHSA-2013:1791
vendor-advisory
x_refsource_REDHAT
SUSE-SU-2013:1807
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2013:1732
vendor-advisory
x_refsource_SUSE
63802
vdb-entry
x_refsource_BID
RHSA-2013:1829
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now