CVE-2013-6671: Code Injection
The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code via crafted use of JavaScript code for ordered list elements.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6671?
CVE-2013-6671 is rated as high severity due to its potential to allow remote code execution.
How do I fix CVE-2013-6671?
To fix CVE-2013-6671, upgrade Mozilla Firefox to version 26.0 or higher, or update affected software such as Thunderbird and SeaMonkey to their respective patched versions.
What software is affected by CVE-2013-6671?
CVE-2013-6671 affects Mozilla Firefox versions before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23.
Can CVE-2013-6671 be exploited remotely?
Yes, CVE-2013-6671 can be exploited by remote attackers through malicious JavaScript targeting ordered list elements.
What are the risks of not patching CVE-2013-6671?
Not patching CVE-2013-6671 puts systems at risk for exploitation, potentially leading to unauthorized code execution and compromise.