{"schemaVersion":3,"id":"CVE-2013-5615","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not properly enforce certain typeset restrictions on the generation of GetElementIC typed array stubs, which has unspecified impact and remote attack vectors.","dates":{"published":"2013-12-11T15:00:00.000Z","modified":"2024-08-06T17:15:21.503Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.04219,"percentile":0.9087,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.04219},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04219,"percentile":0.9087}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04219,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04219,"percentile":0.9087}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_03A31EB03D655037","name":"Exploit Reference (bugzilla.mozilla.org)","source":"reference","url":"https://bugzilla.mozilla.org/show_bug.cgi?id=929261","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[],"affected":[{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"12.04","noFixRecorded":false,"fixedIn":null},{"text":"12.10","noFixRecorded":false,"fixedIn":null},{"text":"13.04","noFixRecorded":false,"fixedIn":null},{"text":"13.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.04 | 12.10 | 13.04 | 13.10","eol":{"isEol":true,"eolDate":"2017-04-28T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"12.04","label":"12.04 'Precise Pangolin' (LTS)","eolFrom":"2017-04-28T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"12.04.5"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"18","noFixRecorded":false,"fixedIn":null},{"text":"19","noFixRecorded":false,"fixedIn":null},{"text":"20","noFixRecorded":false,"fixedIn":null}],"versionsText":"18 | 19 | 20","eol":{"isEol":true,"eolDate":"2014-01-14T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"18","label":"18 (Spherical Cow)","eolFrom":"2014-01-14T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"mozilla","product":"firefox","name":"firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 26.0","noFixRecorded":false,"fixedIn":null},{"text":"≥ 24.0, < 24.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.0 | ≥ 24.0, < 24.2","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"seamonkey","name":"seamonkey","label":"seamonkey","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 2.23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.23","eol":null,"hubHref":"/vendor/mozilla/seamonkey"},{"vendor":"mozilla","product":"thunderbird","name":"thunderbird","label":"thunderbird","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 24.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 24.2","eol":null,"hubHref":"/vendor/mozilla/thunderbird"},{"vendor":"opensuse","product":"opensuse","name":"opensuse","label":"opensuse","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"12.2","noFixRecorded":false,"fixedIn":null},{"text":"12.3","noFixRecorded":false,"fixedIn":null},{"text":"13.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.2 | 12.3 | 13.1","eol":{"isEol":true,"eolDate":"2014-01-15T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"12.2","label":"12.2","eolFrom":"2014-01-15T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"opensuse","label":"openSUSE","category":"os"}},"hubHref":"/vendor/opensuse/opensuse"},{"vendor":"suse","product":"suse_linux_enterprise_desktop","name":"suse linux enterprise desktop","label":"suse_linux_enterprise_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11:sp3","noFixRecorded":false,"fixedIn":null}],"versionsText":"11:sp3","eol":null,"hubHref":"/vendor/suse/suse_linux_enterprise_desktop"},{"vendor":"suse","product":"suse_linux_enterprise_server","name":"suse linux enterprise server","label":"suse_linux_enterprise_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11:sp3","noFixRecorded":false,"fixedIn":null}],"versionsText":"11:sp3","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"sles","label":"SUSE Linux Enterprise Server","category":"os"}},"hubHref":"/vendor/suse/suse_linux_enterprise_server"},{"vendor":"suse","product":"suse_linux_enterprise_software_development_kit","name":"suse linux enterprise software development kit","label":"suse_linux_enterprise_software_development_kit","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"11.0:sp3","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.0:sp3","eol":null,"hubHref":"/vendor/suse/suse_linux_enterprise_software_development_kit"}],"affectedCount":9,"eol":{"hasEol":true,"count":3},"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html","label":"lists.opensuse.org/opensuse-updates/2013-12/msg00120.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html","label":"lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html","label":"lists.opensuse.org/opensuse-updates/2013-12/msg00119.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html","label":"lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html","label":"lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1029470","label":"www.securitytracker.com/id/1029470","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html","label":"lists.opensuse.org/opensuse-updates/2013-12/msg00086.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html","label":"lists.opensuse.org/opensuse-updates/2013-12/msg00121.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2013/mfsa2013-115.html","label":"www.mozilla.org/security/announce/2013/mfsa2013-115.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201504-01","label":"security.gentoo.org/glsa/201504-01","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","label":"www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","hostname":"www.oracle.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html","label":"lists.opensuse.org/opensuse-updates/2013-12/msg00085.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html","label":"lists.opensuse.org/opensuse-updates/2014-01/msg00002.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1029476","label":"www.securitytracker.com/id/1029476","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html","label":"lists.opensuse.org/opensuse-updates/2013-12/msg00087.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html","label":"lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","Mailing List","Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=929261","label":"bugzilla.mozilla.org/show_bug.cgi?id=929261","hostname":"bugzilla.mozilla.org","tags":["X Refsource CONFIRM","Exploit","Issue Tracking","Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2052-1","label":"www.ubuntu.com/usn/USN-2052-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2053-1","label":"www.ubuntu.com/usn/USN-2053-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html","label":"lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","Mailing List","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":["MGASA-2014-0048","OPENSUSE-SU-2024:10071-1","OPENSUSE-SU-2024:10230-1","OPENSUSE-SU-2024:14572-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:10071-1","OPENSUSE-SU-2024:10230-1","OPENSUSE-SU-2024:14572-1"]},"timeline":[{"kind":"published","date":"2013-12-11T15:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-06T17:15:21.503Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T09:53:20.845Z","stale":false,"partial":false}}