Skip to content

01 Record

CVE-2013-5609

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow remote attackers to

UnratedPUBLISHEDCNA: mozilla

CNA base scoreUnratedNo CNA CVSS vector

02 Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow remote attackers to

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 8.09% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 94.8% of scored records. A rank, not a probability.
NVD base score: 9.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: Critical. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2013-12-11 15:00Z12 YR AGO
Last updated: 2024-08-06 17:15Z2 YR AGO
Reserved: 2013-08-26
Assigning CNA: mozilla
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.1
Document digest: 9c1eee54a567468a9520d6a9d3fd3c7177d46a3157db2d182cf674db5fca2493

05 Affected products

VendorProductVersionsPlatforms

canonicalubuntu_linuxNot specified—

fedoraprojectfedoraNot specified—

mozillafirefoxNot specified—

mozillaseamonkeyNot specified—

mozillathunderbirdNot specified—

opensuseopensuseNot specified—

redhatenterprise_linuxNot specified—

redhatenterprise_linux_desktopNot specified—

redhatenterprise_linux_eusNot specified—

redhatenterprise_linux_serverNot specified—

redhatenterprise_linux_server_ausNot specified—

redhatenterprise_linux_server_eusNot specified—

redhatenterprise_linux_server_tusNot specified—

redhatenterprise_linux_workstationNot specified—

susesuse_linux_enterprise_desktopNot specified—

susesuse_linux_enterprise_serverNot specified—

susesuse_linux_enterprise_software_development_kitNot specified—

06 References

bugzilla.mozilla.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=905382x_refsource_CONFIRM
lists.opensuse.orgopenSUSE-SU-2013:1958http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.htmlvendor-advisoryx_refsource_SUSE
lists.opensuse.orgSUSE-SU-2013:1919http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.htmlvendor-advisoryx_refsource_SUSE
bugzilla.mozilla.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=886850x_refsource_CONFIRM
lists.opensuse.orgopenSUSE-SU-2013:1957http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.htmlvendor-advisoryx_refsource_SUSE
lists.fedoraproject.orgFEDORA-2013-23127http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.htmlvendor-advisoryx_refsource_FEDORA
lists.fedoraproject.orgFEDORA-2013-23519http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.htmlvendor-advisoryx_refsource_FEDORA
www.securitytracker.com1029470http://www.securitytracker.com/id/1029470vdb-entryx_refsource_SECTRACK
lists.opensuse.orgopenSUSE-SU-2013:1917http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.htmlvendor-advisoryx_refsource_SUSE
lists.opensuse.orgopenSUSE-SU-2013:1959http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.htmlvendor-advisoryx_refsource_SUSE
security.gentoo.orgGLSA-201504-01https://security.gentoo.org/glsa/201504-01vendor-advisoryx_refsource_GENTOO
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlx_refsource_CONFIRM
lists.opensuse.orgopenSUSE-SU-2013:1916http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.htmlvendor-advisoryx_refsource_SUSE
lists.opensuse.orgopenSUSE-SU-2014:0008http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.htmlvendor-advisoryx_refsource_SUSE
www.securitytracker.com1029476http://www.securitytracker.com/id/1029476vdb-entryx_refsource_SECTRACK
lists.opensuse.orgopenSUSE-SU-2013:1918http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.htmlvendor-advisoryx_refsource_SUSE
lists.fedoraproject.orgFEDORA-2013-23291http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.htmlvendor-advisoryx_refsource_FEDORA
www.ubuntu.comUSN-2052-1http://www.ubuntu.com/usn/USN-2052-1vendor-advisoryx_refsource_UBUNTU
www.mozilla.orghttp://www.mozilla.org/security/announce/2013/mfsa2013-104.htmlx_refsource_CONFIRM
rhn.redhat.comRHSA-2013:1812http://rhn.redhat.com/errata/RHSA-2013-1812.htmlvendor-advisoryx_refsource_REDHAT
bugzilla.mozilla.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=922009x_refsource_CONFIRM
bugzilla.mozilla.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=937582x_refsource_CONFIRM
www.ubuntu.comUSN-2053-1http://www.ubuntu.com/usn/USN-2053-1vendor-advisoryx_refsource_UBUNTU
lists.fedoraproject.orgFEDORA-2013-23295http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.htmlvendor-advisoryx_refsource_FEDORA