Heap-based buffer underflow in the cryptojs_interpret_key_gen_type function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Certificate Request Message Format (CRMF) request.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade seamonkeyUpgrade linux-seamonkeyUpgrade firefoxUpgrade thunderbirdUpgrade linux-firefoxUpgrade linux-thunderbird | Dec 10, 2025 | Aug 8, 2013 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Aug 6, 2013 |
| Mfsa2013 65 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 23.0Upgrade to Mozilla Firefox version 17.0.9 | Aug 7, 2013 | Aug 6, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.20.0 | Nov 7, 2013 | Aug 6, 2013 |
| Suse | — | Upgrade enigmailUpgrade libfreebl3Upgrade sle-sdk-releaseUpgrade libsoftokn3Upgrade mozilla-nss-certs-32bitUpgrade xulrunner-develUpgrade mozilla-nss-certsUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-sysinit-32bitUpgrade seamonkey-translations-commonUpgrade MozillaThunderbird-buildsymbolsUpgrade xulrunner-32bitUpgrade MozillaFirefoxUpgrade mozilla-js-32bitUpgrade mozilla-nsprUpgrade mozilla-nss-toolsUpgrade seamonkey-translations-otherUpgrade libfreebl3-32bitUpgrade seamonkey-venkmanUpgrade mozilla-nss-develUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-32bitUpgrade seamonkeyUpgrade mozilla-nssUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-nss-sysinitUpgrade libsoftokn3-32bitUpgrade xulrunner-buildsymbolsUpgrade mozilla-jsUpgrade MozillaThunderbird-develUpgrade MozillaFirefox-develUpgrade seamonkey-ircUpgrade xulrunnerUpgrade mozilla-nspr-develUpgrade seamonkey-dom-inspectorUpgrade MozillaFirefox-translations-commonUpgrade mozillafirefox-buildsymbolsUpgrade MozillaFirefox-translationsUpgrade MozillaThunderbirdUpgrade mozillafirefox-branding-upstream | Feb 17, 2015 | Aug 6, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Aug 7, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub