CVE-2013-0791: Buffer Overflow
The CERTDecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0791?
CVE-2013-0791 is classified as a high severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2013-0791?
To fix CVE-2013-0791, update to the latest version of the affected software including Mozilla Firefox version 20.0 or later.
What types of software are affected by CVE-2013-0791?
CVE-2013-0791 affects several products including Mozilla Firefox, Thunderbird, SeaMonkey, and Mozilla NSS.
Is CVE-2013-0791 present in older versions of Ubuntu?
Yes, CVE-2013-0791 is present in certain versions of Ubuntu, such as Ubuntu 10.04 and 12.04, among others.
What is the impact of exploiting CVE-2013-0791?
Exploiting CVE-2013-0791 can lead to a denial of service, impacting the availability of the affected applications.