CVE-2013-5591

HIGH

Description

Unspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html

http://www.mozilla.org/security/announce/2013/mfsa2013-93.html

https://bugzilla.mozilla.org/show_bug.cgi?id=859892

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19015

https://security.gentoo.org/glsa/201504-01

Details

Source: MITRE

Published: 2013-10-30

Updated: 2018-10-30

Risk Information

CVSS v2.0

Base Score: 10

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 10

Severity: HIGH