CVE-2013-5607 Details
Description
Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11 and 24.x before 24.1.1, and SeaMonkey before 2.22.1, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted X.509 certificate, a related issue to CVE-2013-1741.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-189 | Numeric Errors | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| mozilla netscape portable runtime | <= 4.10.1 4.1.1 4.1.2 4.2 4.2.2 4.3 4.4.1 4.5.1 4.6 4.6.1 4.6.2 4.6.3 4.6.4 4.6.5 4.6.6 4.6.7 4.6.8 4.7 4.7.1 4.7.2 4.7.3 4.7.4 4.7.5 4.7.6 4.8 4.8.2 4.8.3 4.8.4 4.8.5 4.8.6 4.8.7 4.8.8 4.8.9 4.9 4.9.1 4.9.2 4.9.3 4.9.4 4.9.5 4.9.6 4.10 |
CPE
Remediation
| |
| mozilla seamonkey | <= 2.22 2.0 2.0 alpha_1 2.0 alpha_2 2.0 alpha_3 2.0 beta_1 2.0 beta_2 2.0 rc1 2.0 rc2 2.0.1 2.0.2 2.0.3 2.0.4 2.0.5 2.0.6 2.0.7 2.0.8 2.0.9 2.0.10 2.0.11 2.0.12 2.0.13 2.0.14 2.1 2.1 alpha1 2.1 alpha2 2.1 alpha3 2.1 beta1 2.1 beta2 2.1 beta3 2.1 rc1 2.1 rc2 2.10 2.10 beta1 2.10 beta2 2.10 beta3 2.10.1 2.11 2.11 beta1 2.11 beta2 2.11 beta3 2.11 beta4 2.11 beta5 2.11 beta6 2.12 2.12 beta1 2.12 beta2 2.12 beta3 2.12 beta4 2.12 beta5 2.12 beta6 2.12.1 2.13 2.13 beta1 2.13 beta2 2.13 beta3 2.13 beta4 2.13 beta5 2.13 beta6 2.13.1 2.13.2 2.14 2.14 beta1 2.14 beta2 2.14 beta3 2.14 beta4 2.14 beta5 2.15 2.15 beta1 2.15 beta2 2.15 beta3 2.15 beta4 2.15 beta5 2.15 beta6 2.15.1 2.15.2 2.16 2.16 beta1 2.16 beta2 2.16 beta3 2.16 beta4 2.16 beta5 2.16.1 2.16.2 2.17 2.17 beta1 2.17 beta2 2.17 beta3 2.17 beta4 2.17.1 2.18 beta1 2.18 beta2 2.18 beta3 2.18 beta4 2.19 2.19 beta1 2.19 beta2 2.20 2.20 beta1 2.20 beta2 2.20 beta3 2.21 2.21 beta1 2.21 beta2 2.22 beta1 2.22 beta2 |
CPE
Remediation
| |
| mozilla firefox | 17.0 17.0.1 17.0.2 17.0.3 17.0.4 17.0.5 17.0.6 17.0.7 17.0.8 17.0.9 17.0.10 24.0 24.0.1 24.0.2 <= 25.0 19.0 19.0.1 19.0.2 20.0 20.0.1 21.0 22.0 23.0 23.0.1 |
CPE
Remediation
| |
Change History
24 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 16, 2026 | CVE Modified | [email protected] |
| Apr 29, 2026 | Status Change | [email protected] |
| Nov 25, 2025 | CPE Deprecation Remap | [email protected] |
| Nov 25, 2025 | CPE Deprecation Remap | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| May 14, 2024 | CVE Modified | [email protected] |
| Jan 9, 2018 | CVE Modified | [email protected] |
| Dec 31, 2016 | CVE Modified | [email protected] |
| Dec 22, 2016 | CVE Modified | [email protected] |
| Nov 28, 2016 | CVE Modified | [email protected] |
| Sep 9, 2016 | CVE Modified | [email protected] |
| Nov 20, 2013 | Initial Analysis | [email protected] |