ByteOS Network

NVD Vulnerability Details :

CVE-2013-5615

Modified

Source-security@mozilla.org

Published At-11 Dec, 2013 | 15:55

Updated At-29 Apr, 2026 | 01:13

The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not properly enforce certain typeset restrictions on the generation of GetElementIC typed array stubs, which has unspecified impact and remote attack vectors.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.5

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Mozilla Corporation

>>firefox>>Versions before 26.0(exclusive)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>Versions from 24.0(inclusive) to 24.2(exclusive)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>Versions before 2.23(exclusive)

cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*

Mozilla Corporation

>>thunderbird>>Versions before 24.2(exclusive)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*

Canonical Ltd.

>>ubuntu_linux>>12.10

cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>13.04

cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>13.10

cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*

SUSE

>>suse_linux_enterprise_software_development_kit>>11.0

cpe:2.3:a:suse:suse_linux_enterprise_software_development_kit:11.0:sp3:*:*:*:*:*:*

openSUSE

>>opensuse>>12.2

cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*

openSUSE

>>opensuse>>12.3

cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*

openSUSE

>>opensuse>>13.1

cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

SUSE

>>suse_linux_enterprise_desktop>>11

cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp3:*:*:*:*:*:*

SUSE

>>suse_linux_enterprise_server>>11

cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:-:*:*

SUSE

>>suse_linux_enterprise_server>>11

cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:vmware:*:*

Fedora Project

>>fedora>>18

cpe:2.3:o:fedoraproject:fedora:18:*:*:*:*:*:*:*

Fedora Project

>>fedora>>19

cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*

Fedora Project

>>fedora>>20

cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html	security@mozilla.org	Mailing List Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html	security@mozilla.org	Mailing List Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html	security@mozilla.org	Mailing List Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html	security@mozilla.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html	security@mozilla.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html	security@mozilla.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html	security@mozilla.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html	security@mozilla.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html	security@mozilla.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html	security@mozilla.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html	security@mozilla.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html	security@mozilla.org	Mailing List Third Party Advisory
http://www.mozilla.org/security/announce/2013/mfsa2013-115.html	security@mozilla.org	Vendor Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	security@mozilla.org	Third Party Advisory
http://www.securitytracker.com/id/1029470	security@mozilla.org	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1029476	security@mozilla.org	Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-2052-1	security@mozilla.org	Third Party Advisory
http://www.ubuntu.com/usn/USN-2053-1	security@mozilla.org	Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=929261	security@mozilla.org	Exploit Issue Tracking Vendor Advisory
https://security.gentoo.org/glsa/201504-01	security@mozilla.org	Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://www.mozilla.org/security/announce/2013/mfsa2013-115.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.securitytracker.com/id/1029470	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1029476	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-2052-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.ubuntu.com/usn/USN-2053-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=929261	af854a3a-2127-422b-91ae-364da2661108	Exploit Issue Tracking Vendor Advisory
https://security.gentoo.org/glsa/201504-01	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html

Source: security@mozilla.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html

Source: security@mozilla.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html

Source: security@mozilla.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html

Source: security@mozilla.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html

Source: security@mozilla.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html

Source: security@mozilla.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html

Source: security@mozilla.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html

Source: security@mozilla.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html

Source: security@mozilla.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html

Source: security@mozilla.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html

Source: security@mozilla.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html

Source: security@mozilla.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://www.mozilla.org/security/announce/2013/mfsa2013-115.html

Source: security@mozilla.org

Resource:

Vendor Advisory

Hyperlink: http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Source: security@mozilla.org

Resource:

Third Party Advisory

Hyperlink: http://www.securitytracker.com/id/1029470

Source: security@mozilla.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id/1029476

Source: security@mozilla.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.ubuntu.com/usn/USN-2052-1

Source: security@mozilla.org

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-2053-1

Source: security@mozilla.org

Resource:

Third Party Advisory

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=929261

Source: security@mozilla.org

Resource:

Exploit

Issue Tracking

Vendor Advisory

Hyperlink: https://security.gentoo.org/glsa/201504-01

Source: security@mozilla.org

Resource:

Third Party Advisory

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html