Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-5604

The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly initialize data, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via crafted documents.

Published

2013-10-30T10:55:04.617

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mozilla thunderbird_esr 17.0 Yes
Application mozilla thunderbird_esr 17.0.1 Yes
Application mozilla thunderbird_esr 17.0.2 Yes
Application mozilla thunderbird_esr 17.0.3 Yes
Application mozilla thunderbird_esr 17.0.4 Yes
Application mozilla thunderbird_esr 17.0.5 Yes
Application mozilla thunderbird_esr 17.0.6 Yes
Application mozilla thunderbird_esr 17.0.7 Yes
Application mozilla thunderbird_esr 17.0.8 Yes
Application mozilla thunderbird_esr 17.0.9 Yes
Application mozilla seamonkey ≤ 2.22 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0.1 Yes
Application mozilla seamonkey 2.0.2 Yes
Application mozilla seamonkey 2.0.3 Yes
Application mozilla seamonkey 2.0.4 Yes
Application mozilla seamonkey 2.0.5 Yes
Application mozilla seamonkey 2.0.6 Yes
Application mozilla seamonkey 2.0.7 Yes
Application mozilla seamonkey 2.0.8 Yes
Application mozilla seamonkey 2.0.9 Yes
Application mozilla seamonkey 2.0.10 Yes
Application mozilla seamonkey 2.0.11 Yes
Application mozilla seamonkey 2.0.12 Yes
Application mozilla seamonkey 2.0.13 Yes
Application mozilla seamonkey 2.0.14 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.10 Yes
Application mozilla seamonkey 2.10 Yes
Application mozilla seamonkey 2.10 Yes
Application mozilla seamonkey 2.10 Yes
Application mozilla seamonkey 2.10.1 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12.1 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13.1 Yes
Application mozilla seamonkey 2.13.2 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15.1 Yes
Application mozilla seamonkey 2.15.2 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16.1 Yes
Application mozilla seamonkey 2.16.2 Yes
Application mozilla seamonkey 2.17 Yes
Application mozilla seamonkey 2.17 Yes
Application mozilla seamonkey 2.17 Yes
Application mozilla seamonkey 2.17 Yes
Application mozilla seamonkey 2.17 Yes
Application mozilla seamonkey 2.17.1 Yes
Application mozilla seamonkey 2.18 Yes
Application mozilla seamonkey 2.18 Yes
Application mozilla seamonkey 2.18 Yes
Application mozilla seamonkey 2.18 Yes
Application mozilla seamonkey 2.19 Yes
Application mozilla seamonkey 2.19 Yes
Application mozilla seamonkey 2.19 Yes
Application mozilla seamonkey 2.20 Yes
Application mozilla seamonkey 2.20 Yes
Application mozilla seamonkey 2.20 Yes
Application mozilla seamonkey 2.20 Yes
Application mozilla seamonkey 2.21 Yes
Application mozilla seamonkey 2.21 Yes
Application mozilla seamonkey 2.22 Yes
Application mozilla firefox 17.0 Yes
Application mozilla firefox 17.0.1 Yes
Application mozilla firefox 17.0.2 Yes
Application mozilla firefox 17.0.3 Yes
Application mozilla firefox 17.0.4 Yes
Application mozilla firefox 17.0.5 Yes
Application mozilla firefox 17.0.6 Yes
Application mozilla firefox 17.0.7 Yes
Application mozilla firefox 17.0.8 Yes
Application mozilla firefox 17.0.9 Yes
Application mozilla firefox 24.0 Yes
Application mozilla firefox_esr 24.0.1 Yes
Application mozilla firefox_esr 24.0.2 Yes
Application mozilla thunderbird ≤ 24.0.1 Yes
Application mozilla thunderbird 17.0 Yes
Application mozilla thunderbird 17.0.1 Yes
Application mozilla thunderbird 17.0.2 Yes
Application mozilla thunderbird 17.0.3 Yes
Application mozilla thunderbird 17.0.4 Yes
Application mozilla thunderbird 17.0.5 Yes
Application mozilla thunderbird 17.0.6 Yes
Application mozilla thunderbird 17.0.7 Yes
Application mozilla thunderbird 17.0.8 Yes
Application mozilla thunderbird 24.0 Yes
Application mozilla thunderbird_esr 17.0.9 Yes
Application mozilla firefox ≤ 24.0 Yes
Application mozilla firefox 19.0 Yes
Application mozilla firefox 19.0.1 Yes
Application mozilla firefox 19.0.2 Yes
Application mozilla firefox 20.0 Yes
Application mozilla firefox 20.0.1 Yes
Application mozilla firefox 21.0 Yes
Application mozilla firefox 22.0 Yes
Application mozilla firefox 23.0 Yes
Application mozilla firefox 23.0.1 Yes
References