suse · CVE-2013-1705

Quick triage

Priority: critical Published: 2021-05-30 13:10:21 UTC Updated: 2026-04-18 19:00:35 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2013-1705 severity critical: SUSE including 67 source package names (MozillaFirefox-140.2.0-160000.1.2, MozillaFirefox-17.0.9esr-0.3.1, …), 95 product×package rows across 35 product lines (SUSE Linux Enterprise Desktop 11 SP2, SUSE Linux Enterprise Desktop 11 SP3, … (35 product lines)): Fixed 95.

Description:

Heap-based buffer underflow in the cryptojs_interpret_key_gen_type function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Certificate Request Message Format (CRMF) request.

cvelogic Threat Intelligence