VIR Vulnerability Intelligence Relay

CVE-2013-1710

critical
Published 2013-08-07 · Modified 2026-04-29
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0

Description

The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to execute arbitrary JavaScript code or conduct cross-site scripting (XSS) attacks via vectors related to Certificate Request Message Format (CRMF) request generation.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: security@mozilla.org — http://www.mozilla.org/security/announce/2013/mfsa2013-69.html

Application impact
VendorProductVersionsFixed
mozillaseamonkey{"endIncluding":"2.20"}
mozillaseamonkey2.0
mozillaseamonkey2.0.1
mozillaseamonkey2.0.2
mozillaseamonkey2.0.3
mozillaseamonkey2.0.4
mozillaseamonkey2.0.5
mozillaseamonkey2.0.6
mozillaseamonkey2.0.7
mozillaseamonkey2.0.8
mozillaseamonkey2.0.9
mozillaseamonkey2.0.10
mozillaseamonkey2.0.11
mozillaseamonkey2.0.12
mozillaseamonkey2.0.13
mozillaseamonkey2.0.14
mozillaseamonkey2.1
mozillaseamonkey2.2
mozillaseamonkey2.3
mozillaseamonkey2.3.1
mozillaseamonkey2.3.2
mozillaseamonkey2.3.3
mozillaseamonkey2.4
mozillaseamonkey2.4.1
mozillaseamonkey2.5
mozillaseamonkey2.6
mozillaseamonkey2.6.1
mozillaseamonkey2.7
mozillaseamonkey2.7.1
mozillaseamonkey2.7.2
mozillaseamonkey2.8
mozillaseamonkey2.9
mozillaseamonkey2.9.1
mozillaseamonkey2.10
mozillaseamonkey2.10.1
mozillaseamonkey2.11
mozillaseamonkey2.12
mozillaseamonkey2.12.1
mozillaseamonkey2.13
mozillaseamonkey2.13.1
mozillaseamonkey2.13.2
mozillaseamonkey2.14
mozillaseamonkey2.15
mozillaseamonkey2.15.1
mozillaseamonkey2.15.2
mozillaseamonkey2.16
mozillaseamonkey2.16.1
mozillaseamonkey2.16.2
mozillaseamonkey2.17
mozillaseamonkey2.17.1
mozillaseamonkey2.18
mozillaseamonkey2.19
mozillaseamonkey2.20
mozillathunderbird_esr17.0
mozillathunderbird_esr17.0.1
mozillathunderbird_esr17.0.2
mozillathunderbird_esr17.0.3
mozillathunderbird_esr17.0.4
mozillathunderbird_esr17.0.5
mozillathunderbird_esr17.0.6
mozillathunderbird_esr17.0.7
mozillafirefox{"endIncluding":"22.0"}
mozillafirefox19.0
mozillafirefox19.0.1
mozillafirefox19.0.2
mozillafirefox20.0
mozillafirefox20.0.1
mozillafirefox21.0
mozillathunderbird{"endIncluding":"17.0.7"}
mozillathunderbird17.0
mozillathunderbird17.0.1
mozillathunderbird17.0.2
mozillathunderbird17.0.3
mozillathunderbird17.0.4
mozillathunderbird17.0.5
mozillathunderbird17.0.6
mozillafirefox17.0
mozillafirefox17.0.1
mozillafirefox17.0.2
mozillafirefox17.0.3
mozillafirefox17.0.4
mozillafirefox17.0.5
mozillafirefox17.0.6
mozillafirefox17.0.7

References

CWEs

CWE-20

Verify integrity in audit chain (admin only). AS-IS.