CVE-2013-5611: canonical ubuntu_linux
CVSS: 5.8v2.0MediumModified
Published 11-12-2013Last modified 06-08-2024
Vulnerability summary
CVE-2013-5611 is a medium (CVSS 5.8) vulnerability in canonical ubuntu_linux. EPSS estimates a 2.14% chance of exploitation in the next 30 days, higher than 81.7% of scored vulnerabilities.
CVSS score
5.8/10
010
Medium · v2.0 (NVD)EPSS score
2.14%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 2 · Related 2Timeline
- 11-12-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation.
CVSS metrics
1 score · 1 source · 1 versionMedium 5.8Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:N/I:P/A:PSourcesSingle source
EPSS trend
Probability
2.14%
Chance of exploitation in the next 30 days
Percentile
82%
Versus all other CVEs
30-day change
0.00 pp
From 2.14% on 18-09-2026
18-09-202618-10-2026
EPSS score2.14%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse3 products
Canonical1 product
- ubuntu_linuxEOL12.04 | 12.10 | 13.04 | 13.10
Fedoraproject1 product
- fedoraEOL19 | 20
Mozilla1 product
- firefox≤ 25.0.1 | 0.1 | 0.2 | 0.3 | 0.4 | 0.5 | 0.6 | 0.6.1 | 0.7 | 0.7.1 | 0.8 | 0.9 | 0.9:rc | 0.9.1 | 0.9.2 | 0.9.3 | 0.10 | 0.10.1 | 1.0 | 1.0:preview_release | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5 | 1.0.6 | 1.0.7 | 1.0.8 | 1.5 | 1.5:beta1 | 1.5:beta2 | 1.5.0.1 | 1.5.0.2 | 1.5.0.3 | 1.5.0.4 | 1.5.0.5 | 1.5.0.6 | 1.5.0.7 | 1.5.0.8 | 1.5.0.9 | 1.5.0.10 | 1.5.0.11 | 1.5.0.12 | 1.5.1 | 1.5.2 | 1.5.3 | 1.5.4 | 1.5.5 | 1.5.6 | 1.5.7 | 1.5.8 | 2.0 | 2.0.0.1 | 2.0.0.2 | 2.0.0.3 | 2.0.0.4 | 2.0.0.5 | 2.0.0.6 | 2.0.0.7 | 2.0.0.8 | 2.0.0.9 | 2.0.0.10 | 2.0.0.11 | 2.0.0.12 | 2.0.0.13 | 2.0.0.14 | 2.0.0.15 | 2.0.0.16 | 2.0.0.17 | 2.0.0.18 | 2.0.0.19 | 2.0.0.20 | 3.0 | 3.0.1 | 3.0.2 | 3.0.3 | 3.0.4 | 3.0.5 | 3.0.6 | 3.0.7 | 3.0.8 | 3.0.9 | 3.0.10 | 3.0.11 | 3.0.12 | 3.0.13 | 3.0.14 | 3.0.15 | 3.0.16 | 3.0.17 | 3.0.18 | 3.0.19 | 3.5 | 3.5.1 | 3.5.2 | 3.5.3 | 3.5.4 | 3.5.5 | 3.5.6 | 3.5.7 | 3.5.8 | 3.5.9 | 3.5.10 | 3.5.11 | 3.5.12 | 3.5.13 | 3.5.14 | 3.5.15 | 3.5.16 | 3.5.17 | 3.5.18 | 3.5.19 | 3.6 | 3.6.2 | 3.6.3 | 3.6.4 | 3.6.6 | 3.6.7 | 3.6.8 | 3.6.9 | 3.6.10 | 3.6.11 | 3.6.12 | 3.6.13 | 3.6.14 | 3.6.15 | 3.6.16 | 3.6.17 | 3.6.18 | 3.6.19 | 3.6.20 | 3.6.21 | 3.6.22 | 3.6.23 | 3.6.24 | 3.6.25 | 3.6.26 | 3.6.27 | 3.6.28 | 4.0 | 4.0:beta1 | 4.0:beta10 | 4.0:beta11 | 4.0:beta12 | 4.0:beta2 | 4.0:beta3 | 4.0:beta4 | 4.0:beta5 | 4.0:beta6 | 4.0:beta7 | 4.0:beta8 | 4.0:beta9 | 4.0.1 | 5.0 | 5.0.1 | 6.0 | 6.0.1 | 6.0.2 | 7.0 | 7.0.1 | 8.0 | 8.0.1 | 9.0 | 9.0.1 | 10.0 | 10.0.1 | 10.0.2 | 10.0.3 | 10.0.4 | 10.0.5 | 10.0.6 | 10.0.7 | 10.0.8 | 10.0.9 | 10.0.10 | 10.0.11 | 10.0.12 | 11.0 | 12.0 | 12.0:beta6 | 13.0 | 13.0.1 | 14.0 | 14.0.1 | 15.0 | 16.0 | 16.0.1 | 16.0.2 | 17.0.2 | 17.0.3 | 17.0.4 | 17.0.5 | 17.0.6 | 17.0.7 | 17.0.8 | 17.0.9 | 17.0.10 | 17.0.11 | 18.0 | 18.0.1 | 18.0.2 | 19.0 | 19.0.1 | 19.0.2 | 20.0 | 21.0 | 23.0 | 23.0.1 | 24.0 | 24.1 | 24.1.1 | 25.0
Opensuse1 product
- opensuseEOL13.1
Opensuse_project1 product
- opensuse11.4 | 12.3
Oracle1 product
- solarisEOL11.3
7 vendors · 9 products
References
12 links- lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- lists.opensuse.org/opensuse-updates/2013-12/msg00086.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlX Refsource CONFIRMThird Party Advisory
- lists.opensuse.org/opensuse-updates/2013-12/msg00085.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- lists.opensuse.org/opensuse-updates/2014-01/msg00002.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
Show all 12 references
- lists.opensuse.org/opensuse-updates/2013-12/msg00087.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory