CVE-2013-5607: Integer Overflow

Published Nov 20, 2013
·
Updated

Integer overflow in the PLArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11 and 24.x before 24.1.1, and SeaMonkey before 2.22.1, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted X.509 certificate, a related issue to CVE-2013-1741.

Affected Software

185 affected components
Mozilla Netscape Portable Runtime<=4.10.1
Mozilla Netscape Portable Runtime=4.1.1
Mozilla Netscape Portable Runtime=4.1.2
Mozilla Netscape Portable Runtime=4.2
Mozilla Netscape Portable Runtime=4.2.2
Mozilla Netscape Portable Runtime=4.3
Mozilla Netscape Portable Runtime=4.4.1
Mozilla Netscape Portable Runtime=4.5.1
Mozilla Netscape Portable Runtime=4.6
Mozilla Netscape Portable Runtime=4.6.1
Mozilla Netscape Portable Runtime=4.6.2
Mozilla Netscape Portable Runtime=4.6.3
Mozilla Netscape Portable Runtime=4.6.4
Mozilla Netscape Portable Runtime=4.6.5
Mozilla Netscape Portable Runtime=4.6.6
Mozilla Netscape Portable Runtime=4.6.7
Mozilla Netscape Portable Runtime=4.6.8
Mozilla Netscape Portable Runtime=4.7
Mozilla Netscape Portable Runtime=4.7.1
Mozilla Netscape Portable Runtime=4.7.2
Mozilla Netscape Portable Runtime=4.7.3
Mozilla Netscape Portable Runtime=4.7.4
Mozilla Netscape Portable Runtime=4.7.5
Mozilla Netscape Portable Runtime=4.7.6
Mozilla Netscape Portable Runtime=4.8
Mozilla Netscape Portable Runtime=4.8.2
Mozilla Netscape Portable Runtime=4.8.3
Mozilla Netscape Portable Runtime=4.8.4
Mozilla Netscape Portable Runtime=4.8.5
Mozilla Netscape Portable Runtime=4.8.6
Mozilla Netscape Portable Runtime=4.8.7
Mozilla Netscape Portable Runtime=4.8.8
Mozilla Netscape Portable Runtime=4.8.9
Mozilla Netscape Portable Runtime=4.9
Mozilla Netscape Portable Runtime=4.9.1
Mozilla Netscape Portable Runtime=4.9.2
Mozilla Netscape Portable Runtime=4.9.3
Mozilla Netscape Portable Runtime=4.9.4
Mozilla Netscape Portable Runtime=4.9.5
Mozilla Netscape Portable Runtime=4.9.6
Mozilla Netscape Portable Runtime=4.10
Mozilla SeaMonkey<=2.22
Mozilla SeaMonkey=2.0
Mozilla SeaMonkey=2.0-alpha_1
Mozilla SeaMonkey=2.0-alpha_2
Mozilla SeaMonkey=2.0-alpha_3
Mozilla SeaMonkey=2.0-beta_1
Mozilla SeaMonkey=2.0-beta_2
Mozilla SeaMonkey=2.0-rc1
Mozilla SeaMonkey=2.0-rc2
Mozilla SeaMonkey=2.0.1
Mozilla SeaMonkey=2.0.2
Mozilla SeaMonkey=2.0.3
Mozilla SeaMonkey=2.0.4
Mozilla SeaMonkey=2.0.5
Mozilla SeaMonkey=2.0.6
Mozilla SeaMonkey=2.0.7
Mozilla SeaMonkey=2.0.8
Mozilla SeaMonkey=2.0.9
Mozilla SeaMonkey=2.0.10
Mozilla SeaMonkey=2.0.11
Mozilla SeaMonkey=2.0.12
Mozilla SeaMonkey=2.0.13
Mozilla SeaMonkey=2.0.14
Mozilla SeaMonkey=2.1
Mozilla SeaMonkey=2.1-alpha1
Mozilla SeaMonkey=2.1-alpha2
Mozilla SeaMonkey=2.1-alpha3
Mozilla SeaMonkey=2.1-beta1
Mozilla SeaMonkey=2.1-beta2
Mozilla SeaMonkey=2.1-beta3
Mozilla SeaMonkey=2.1-rc1
Mozilla SeaMonkey=2.1-rc2
Mozilla SeaMonkey=2.10
Mozilla SeaMonkey=2.10-beta1
Mozilla SeaMonkey=2.10-beta2
Mozilla SeaMonkey=2.10-beta3
Mozilla SeaMonkey=2.10.1
Mozilla SeaMonkey=2.11
Mozilla SeaMonkey=2.11-beta1
Mozilla SeaMonkey=2.11-beta2
Mozilla SeaMonkey=2.11-beta3
Mozilla SeaMonkey=2.11-beta4
Mozilla SeaMonkey=2.11-beta5
Mozilla SeaMonkey=2.11-beta6
Mozilla SeaMonkey=2.12
Mozilla SeaMonkey=2.12-beta1
Mozilla SeaMonkey=2.12-beta2
Mozilla SeaMonkey=2.12-beta3
Mozilla SeaMonkey=2.12-beta4
Mozilla SeaMonkey=2.12-beta5
Mozilla SeaMonkey=2.12-beta6
Mozilla SeaMonkey=2.12.1
Mozilla SeaMonkey=2.13
Mozilla SeaMonkey=2.13-beta1
Mozilla SeaMonkey=2.13-beta2
Mozilla SeaMonkey=2.13-beta3
Mozilla SeaMonkey=2.13-beta4
Mozilla SeaMonkey=2.13-beta5
Mozilla SeaMonkey=2.13-beta6
Mozilla SeaMonkey=2.13.1
Mozilla SeaMonkey=2.13.2
Mozilla SeaMonkey=2.14
Mozilla SeaMonkey=2.14-beta1
Mozilla SeaMonkey=2.14-beta2
Mozilla SeaMonkey=2.14-beta3
Mozilla SeaMonkey=2.14-beta4
Mozilla SeaMonkey=2.14-beta5
Mozilla SeaMonkey=2.15
Mozilla SeaMonkey=2.15-beta1
Mozilla SeaMonkey=2.15-beta2
Mozilla SeaMonkey=2.15-beta3
Mozilla SeaMonkey=2.15-beta4
Mozilla SeaMonkey=2.15-beta5
Mozilla SeaMonkey=2.15-beta6
Mozilla SeaMonkey=2.15.1
Mozilla SeaMonkey=2.15.2
Mozilla SeaMonkey=2.16
Mozilla SeaMonkey=2.16-beta1
Mozilla SeaMonkey=2.16-beta2
Mozilla SeaMonkey=2.16-beta3
Mozilla SeaMonkey=2.16-beta4
Mozilla SeaMonkey=2.16-beta5
Mozilla SeaMonkey=2.16.1
Mozilla SeaMonkey=2.16.2
Mozilla SeaMonkey=2.17
Mozilla SeaMonkey=2.17-beta1
Mozilla SeaMonkey=2.17-beta2
Mozilla SeaMonkey=2.17-beta3
Mozilla SeaMonkey=2.17-beta4
Mozilla SeaMonkey=2.17.1
Mozilla SeaMonkey=2.18-beta1
Mozilla SeaMonkey=2.18-beta2
Mozilla SeaMonkey=2.18-beta3
Mozilla SeaMonkey=2.18-beta4
Mozilla SeaMonkey=2.19
Mozilla SeaMonkey=2.19-beta1
Mozilla SeaMonkey=2.19-beta2
Mozilla SeaMonkey=2.20
Mozilla SeaMonkey=2.20-beta1
Mozilla SeaMonkey=2.20-beta2
Mozilla SeaMonkey=2.20-beta3
Mozilla SeaMonkey=2.21
Mozilla SeaMonkey=2.21-beta1
Mozilla SeaMonkey=2.21-beta2
Mozilla SeaMonkey=2.22-beta1
Mozilla SeaMonkey=2.22-beta2
Mozilla Firefox ESR=17.0
Mozilla Firefox ESR=17.0.1
Mozilla Firefox ESR=17.0.2
Mozilla Firefox ESR=17.0.3
Mozilla Firefox ESR=17.0.4
Mozilla Firefox ESR=17.0.5
Mozilla Firefox ESR=17.0.6
Mozilla Firefox ESR=17.0.7
Mozilla Firefox ESR=17.0.8
Mozilla Firefox ESR=17.0.9
Mozilla Firefox ESR=17.0.10
Mozilla Firefox ESR=24.0
Mozilla Firefox ESR=24.0.1
Mozilla Firefox ESR=24.0.2
Mozilla Firefox<=25.0
Mozilla Firefox=19.0
Mozilla Firefox=19.0.1
Mozilla Firefox=19.0.2
Mozilla Firefox=20.0
Mozilla Firefox=20.0.1
Mozilla Firefox=21.0
Mozilla Firefox=22.0
Mozilla Firefox=23.0
Mozilla Firefox=23.0.1
Mozilla Firefox=24.0
Mozilla Firefox=17.0
Mozilla Firefox=17.0.1
Mozilla Firefox=17.0.2
Mozilla Firefox=17.0.3
Mozilla Firefox=17.0.4
Mozilla Firefox=17.0.5
Mozilla Firefox=17.0.6
Mozilla Firefox=17.0.7
Mozilla Firefox=17.0.8
Mozilla Firefox=17.0.9
Mozilla Firefox=17.0.10
Mozilla Firefox=24.0.1
Mozilla Firefox=24.0.2

Event History

Nov 20, 2013
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Data Sourced
via NVD·02:12 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2013-5607?

CVE-2013-5607 has a moderate severity rating as it allows remote attackers to cause a denial of service by triggering an application crash.

2

How do I fix CVE-2013-5607?

To fix CVE-2013-5607, update to a version of Mozilla Netscape Portable Runtime or the associated applications that is 4.10.2 or later.

3

Which software versions are affected by CVE-2013-5607?

CVE-2013-5607 affects versions of Mozilla Netscape Portable Runtime before 4.10.2, Firefox before 25.0.1, and SeaMonkey before 2.22.1.

4

What vulnerabilities are related to CVE-2013-5607?

CVE-2013-5607 itself is a specific vulnerability, but it may be related to other denial of service vulnerabilities in similar Mozilla components.

5

Is CVE-2013-5607 exploitable in all environments?

CVE-2013-5607 can be exploited in any environment where vulnerable versions of the affected software are running.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203