{"schemaVersion":3,"id":"CVE-2013-6671","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code via crafted use of JavaScript code for ordered list elements.","dates":{"published":"2013-12-11T15:00:00.000Z","modified":"2024-08-06T17:46:22.682Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.11076,"percentile":0.95888,"severity":"medium","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.11076},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.11076,"percentile":0.95888}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.11076,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.11076,"percentile":0.95888}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_953304C6A126E701","name":"Exploit Reference (bugzilla.mozilla.org)","source":"reference","url":"https://bugzilla.mozilla.org/show_bug.cgi?id=930281","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-94","name":"Improper Control of Generation of Code ('Code Injection')","description":"The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/94.html"}],"affected":[{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"12.04","noFixRecorded":false,"fixedIn":null},{"text":"12.10","noFixRecorded":false,"fixedIn":null},{"text":"13.04","noFixRecorded":false,"fixedIn":null},{"text":"13.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.04 | 12.10 | 13.04 | 13.10","eol":{"isEol":true,"eolDate":"2017-04-28T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"12.04","label":"12.04 'Precise Pangolin' (LTS)","eolFrom":"2017-04-28T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"12.04.5"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"18","noFixRecorded":false,"fixedIn":null},{"text":"19","noFixRecorded":false,"fixedIn":null},{"text":"20","noFixRecorded":false,"fixedIn":null}],"versionsText":"18 | 19 | 20","eol":{"isEol":true,"eolDate":"2014-01-14T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"18","label":"18 (Spherical Cow)","eolFrom":"2014-01-14T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"mozilla","product":"firefox","name":"Firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 26.0","noFixRecorded":false,"fixedIn":null},{"text":"≥ 24.0, < 24.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.0 | ≥ 24.0, < 24.2","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"seamonkey","name":"seamonkey","label":"seamonkey","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 2.23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.23","eol":null,"hubHref":"/vendor/mozilla/seamonkey"},{"vendor":"mozilla","product":"thunderbird","name":"Thunderbird","label":"thunderbird","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 24.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 24.2","eol":null,"hubHref":"/vendor/mozilla/thunderbird"},{"vendor":"opensuse","product":"opensuse","name":"opensuse","label":"opensuse","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"12.2","noFixRecorded":false,"fixedIn":null},{"text":"12.3","noFixRecorded":false,"fixedIn":null},{"text":"13.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.2 | 12.3 | 13.1","eol":{"isEol":true,"eolDate":"2014-01-15T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"12.2","label":"12.2","eolFrom":"2014-01-15T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"opensuse","label":"openSUSE","category":"os"}},"hubHref":"/vendor/opensuse/opensuse"},{"vendor":"redhat","product":"enterprise_linux_desktop","name":"enterprise linux desktop","label":"enterprise_linux_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0 | 6.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_eus","name":"enterprise linux eus","label":"enterprise_linux_eus","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.5","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_server","name":"enterprise linux server","label":"enterprise_linux_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0 | 6.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus","name":"enterprise linux server aus","label":"enterprise_linux_server_aus","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.5","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_eus","name":"enterprise linux server eus","label":"enterprise_linux_server_eus","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.5","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_server_tus","name":"enterprise linux server tus","label":"enterprise_linux_server_tus","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.5","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation","name":"enterprise linux workstation","label":"enterprise_linux_workstation","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0 | 6.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_workstation"},{"vendor":"suse","product":"suse_linux_enterprise_desktop","name":"suse linux enterprise desktop","label":"suse_linux_enterprise_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11:sp3","noFixRecorded":false,"fixedIn":null}],"versionsText":"11:sp3","eol":null,"hubHref":"/vendor/suse/suse_linux_enterprise_desktop"},{"vendor":"suse","product":"suse_linux_enterprise_server","name":"suse linux enterprise server","label":"suse_linux_enterprise_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11:sp3","noFixRecorded":false,"fixedIn":null}],"versionsText":"11:sp3","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"sles","label":"SUSE Linux Enterprise Server","category":"os"}},"hubHref":"/vendor/suse/suse_linux_enterprise_server"},{"vendor":"suse","product":"suse_linux_enterprise_software_development_kit","name":"suse linux enterprise software development kit","label":"suse_linux_enterprise_software_development_kit","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"11.0:sp3","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.0:sp3","eol":null,"hubHref":"/vendor/suse/suse_linux_enterprise_software_development_kit"}],"affectedCount":16,"eol":{"hasEol":true,"count":3},"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html","label":"lists.opensuse.org/opensuse-updates/2013-12/msg00120.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html","label":"lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html","label":"lists.opensuse.org/opensuse-updates/2013-12/msg00119.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html","label":"lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html","label":"lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1029470","label":"www.securitytracker.com/id/1029470","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html","label":"lists.opensuse.org/opensuse-updates/2013-12/msg00086.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html","label":"lists.opensuse.org/opensuse-updates/2013-12/msg00121.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201504-01","label":"security.gentoo.org/glsa/201504-01","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","label":"www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","hostname":"www.oracle.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html","label":"lists.opensuse.org/opensuse-updates/2013-12/msg00085.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html","label":"lists.opensuse.org/opensuse-updates/2014-01/msg00002.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1029476","label":"www.securitytracker.com/id/1029476","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/64212","label":"www.securityfocus.com/bid/64212","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html","label":"lists.opensuse.org/opensuse-updates/2013-12/msg00087.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html","label":"lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2052-1","label":"www.ubuntu.com/usn/USN-2052-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=930281","label":"bugzilla.mozilla.org/show_bug.cgi?id=930281","hostname":"bugzilla.mozilla.org","tags":["X Refsource CONFIRM","Exploit","Issue Tracking","Vendor Advisory"]},{"url":"http://www.mozilla.org/security/announce/2013/mfsa2013-111.html","label":"www.mozilla.org/security/announce/2013/mfsa2013-111.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1812.html","label":"rhn.redhat.com/errata/RHSA-2013-1812.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2053-1","label":"www.ubuntu.com/usn/USN-2053-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html","label":"lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","Mailing List","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":["MGASA-2014-0006","MGASA-2014-0048","OPENSUSE-SU-2024:10071-1","OPENSUSE-SU-2024:10230-1","OPENSUSE-SU-2024:14572-1","RHSA-2013:1812","RHSA-2013:1823"],"duplicates":[],"related":["OPENSUSE-SU-2024:10071-1","OPENSUSE-SU-2024:10230-1","OPENSUSE-SU-2024:14572-1"]},"timeline":[{"kind":"published","date":"2013-12-11T15:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-06T17:46:22.682Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":90,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T07:03:38.440Z","stale":false,"partial":false}}