CVE-2013-5615 — Mozilla Firefox vulnerability

8 documents6 sources
Severity
9.8CRITICALNVD
EPSS
2.0%
top 16.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Mozilla FirefoxMozilla SeamonkeyMozilla Thunderbird+6 more
Timeline
PublishedDec 11
Latest updateMay 13

Description

The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not properly enforce certain typeset restrictions on the generation of GetElementIC typed array stubs, which has unspecified impact and remote attack vectors.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages7 packages

▶NVDmozilla/firefox24.0 — 24.2+1
▶NVDmozilla/seamonkey< 2.23
▶NVDopensuse/opensuse12.2, 12.3, 13.1+2

Also affects: Fedora 18, 19, 20, Ubuntu Linux 12.04, 12.10, 13.04, 13.10

🔴Vulnerability Details

2
GHSA
GHSA-7qw2-p67q-h5xq: The JavaScript implementation in Mozilla Firefox before 26↗2022-05-13
▶
CVEList
CVE-2013-5615: The JavaScript implementation in Mozilla Firefox before 26↗2013-12-11
▶

📋Vendor Advisories

3
Ubuntu
Thunderbird vulnerabilities↗2013-12-11
▶
Ubuntu
Firefox vulnerabilities↗2013-12-11
▶
Red Hat
Mozilla: GetElementIC typed array stubs can be generated outside observed typesets (MFSA 2013-115)↗2013-12-10
▶

💬Community

1
Bugzilla
CVE-2013-5615 Mozilla: GetElementIC typed array stubs can be generated outside observed typesets (MFSA 2013-115)↗2013-12-09
▶
CVE-2013-5615 — Mozilla Firefox vulnerability | cvebase