CVE-2013-5607

N/A Unknown
Published: November 20, 2013 Modified: November 25, 2025
View on NVD

Description

Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11 and 24.x before 24.1.1, and SeaMonkey before 2.22.1, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted X.509 certificate, a related issue to CVE-2013-1741.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761
Source: security@mozilla.org
http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00000.html
Source: security@mozilla.org
http://lists.opensuse.org/opensuse-updates/2013-11/msg00080.html
Source: security@mozilla.org
http://rhn.redhat.com/errata/RHSA-2013-1791.html
Source: security@mozilla.org
http://rhn.redhat.com/errata/RHSA-2013-1829.html
Source: security@mozilla.org
http://security.gentoo.org/glsa/glsa-201406-19.xml
Source: security@mozilla.org
http://www.debian.org/security/2013/dsa-2820
Source: security@mozilla.org
http://www.mozilla.org/security/announce/2013/mfsa2013-103.html
Source: security@mozilla.org
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
Source: security@mozilla.org
http://www.securityfocus.com/bid/63802
Source: security@mozilla.org
http://www.ubuntu.com/usn/USN-2031-1
Source: security@mozilla.org
http://www.ubuntu.com/usn/USN-2032-1
Source: security@mozilla.org
http://www.ubuntu.com/usn/USN-2087-1
Source: security@mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=927687
Source: security@mozilla.org
https://groups.google.com/forum/message/raw?msg=mozilla.dev.tech.nspr/_8AcygMEjSA/mm_cqQzLPFQJ
Source: security@mozilla.org
https://security.gentoo.org/glsa/201504-01
Source: security@mozilla.org
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00000.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.opensuse.org/opensuse-updates/2013-11/msg00080.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://rhn.redhat.com/errata/RHSA-2013-1791.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://rhn.redhat.com/errata/RHSA-2013-1829.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://security.gentoo.org/glsa/glsa-201406-19.xml
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2013/dsa-2820
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.mozilla.org/security/announce/2013/mfsa2013-103.html
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/63802
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ubuntu.com/usn/USN-2031-1
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ubuntu.com/usn/USN-2032-1
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ubuntu.com/usn/USN-2087-1
Source: af854a3a-2127-422b-91ae-364da2661108
https://bugzilla.mozilla.org/show_bug.cgi?id=927687
Source: af854a3a-2127-422b-91ae-364da2661108
https://groups.google.com/forum/message/raw?msg=mozilla.dev.tech.nspr/_8AcygMEjSA/mm_cqQzLPFQJ
Source: af854a3a-2127-422b-91ae-364da2661108
https://security.gentoo.org/glsa/201504-01
Source: af854a3a-2127-422b-91ae-364da2661108

32 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
1.6%
81th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-189

Affected Vendors

mozilla

Related CVEs

CVE-2025-52691 10.0
CVE-2025-15168 7.3
CVE-2025-15167 7.3
CVE-2025-15166 7.3
CVE-2025-15165 7.3