Heap-based buffer underflow in the cryptojs_interpret_key_gen_type function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Certificate Request Message Format (CRMF) request.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade seamonkeyUpgrade firefoxUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade linux-thunderbird | Dec 10, 2025 | Aug 8, 2013 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox. | Oct 30, 2017 | Aug 6, 2013 |
| Mfsa2013 65 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 17.0.9Upgrade to Mozilla Firefox version 23.0 | Aug 7, 2013 | Aug 6, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.20Upgrade to the latest version of Mozilla SeaMonkey | Nov 7, 2013 | Aug 6, 2013 |
| Suse | — | Upgrade xulrunner-buildsymbolsUpgrade MozillaThunderbird-develUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nssUpgrade MozillaThunderbirdUpgrade xulrunnerUpgrade mozilla-nspr-develUpgrade mozilla-jsUpgrade MozillaFirefox-translationsUpgrade mozillafirefox-branding-upstreamUpgrade seamonkey-dom-inspectorUpgrade mozillafirefox-buildsymbolsUpgrade seamonkey-ircUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-nss-sysinitUpgrade MozillaFirefox-develUpgrade libsoftokn3-32bitUpgrade MozillaThunderbird-buildsymbolsUpgrade enigmailUpgrade libfreebl3-32bitUpgrade MozillaFirefoxUpgrade mozilla-nss-toolsUpgrade mozilla-nsprUpgrade seamonkey-translations-otherUpgrade mozilla-nss-certs-32bitUpgrade seamonkey-venkmanUpgrade seamonkey-translations-commonUpgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nss-certsUpgrade sle-sdk-releaseUpgrade mozilla-nss-32bitUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-nss-develUpgrade seamonkeyUpgrade xulrunner-32bitUpgrade MozillaFirefox-translations-otherUpgrade libsoftokn3Upgrade libfreebl3Upgrade xulrunner-develUpgrade mozilla-js-32bitUpgrade mozilla-nspr-32bit | Feb 17, 2015 | Aug 6, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Aug 7, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub