{"schemaVersion":3,"id":"CVE-2013-6673","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle attackers to spoof SSL servers in opportunistic circumstances via a valid certificate that is unacceptable to the user.","dates":{"published":"2013-12-11T15:00:00.000Z","modified":"2024-08-06T17:46:22.836Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.9,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.02886,"percentile":0.86678,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.02886},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02886,"percentile":0.86678}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02886,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02886,"percentile":0.86678}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_2EDCC8BD476BD80A","name":"Exploit Reference (bugzilla.mozilla.org)","source":"reference","url":"https://bugzilla.mozilla.org/show_bug.cgi?id=917380","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-310","name":"Cryptographic Issues","description":"Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.","type":"category","status":"Draft","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/310.html"}],"affected":[{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"12.04","noFixRecorded":false,"fixedIn":null},{"text":"12.10","noFixRecorded":false,"fixedIn":null},{"text":"13.04","noFixRecorded":false,"fixedIn":null},{"text":"13.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.04 | 12.10 | 13.04 | 13.10","eol":{"isEol":true,"eolDate":"2017-04-28T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"12.04","label":"12.04 'Precise Pangolin' (LTS)","eolFrom":"2017-04-28T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"12.04.5"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"18","noFixRecorded":false,"fixedIn":null},{"text":"19","noFixRecorded":false,"fixedIn":null},{"text":"20","noFixRecorded":false,"fixedIn":null}],"versionsText":"18 | 19 | 20","eol":{"isEol":true,"eolDate":"2014-01-14T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"18","label":"18 (Spherical Cow)","eolFrom":"2014-01-14T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"mozilla","product":"firefox","name":"Firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 26.0","noFixRecorded":false,"fixedIn":null},{"text":"≥ 24.0, < 24.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.0 | ≥ 24.0, < 24.2","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"seamonkey","name":"seamonkey","label":"seamonkey","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 2.23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.23","eol":null,"hubHref":"/vendor/mozilla/seamonkey"},{"vendor":"mozilla","product":"thunderbird","name":"Thunderbird","label":"thunderbird","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 24.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 24.2","eol":null,"hubHref":"/vendor/mozilla/thunderbird"},{"vendor":"opensuse","product":"opensuse","name":"opensuse","label":"opensuse","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"12.2","noFixRecorded":false,"fixedIn":null},{"text":"12.3","noFixRecorded":false,"fixedIn":null},{"text":"13.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.2 | 12.3 | 13.1","eol":{"isEol":true,"eolDate":"2014-01-15T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"12.2","label":"12.2","eolFrom":"2014-01-15T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"opensuse","label":"openSUSE","category":"os"}},"hubHref":"/vendor/opensuse/opensuse"},{"vendor":"suse","product":"linux_enterprise_desktop","name":"linux enterprise desktop","label":"linux_enterprise_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11:sp3","noFixRecorded":false,"fixedIn":null}],"versionsText":"11:sp3","eol":null,"hubHref":"/vendor/suse/linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_server","name":"linux enterprise server","label":"linux_enterprise_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11:sp3","noFixRecorded":false,"fixedIn":null}],"versionsText":"11:sp3","eol":null,"hubHref":"/vendor/suse/linux_enterprise_server"},{"vendor":"suse","product":"suse_linux_enterprise_software_development_kit","name":"suse linux enterprise software development kit","label":"suse_linux_enterprise_software_development_kit","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"11.0:sp3","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.0:sp3","eol":null,"hubHref":"/vendor/suse/suse_linux_enterprise_software_development_kit"}],"affectedCount":9,"eol":{"hasEol":true,"count":3},"references":[{"url":"http://www.securityfocus.com/bid/64213","label":"www.securityfocus.com/bid/64213","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html","label":"lists.opensuse.org/opensuse-updates/2013-12/msg00120.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html","label":"lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html","label":"lists.opensuse.org/opensuse-updates/2013-12/msg00119.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html","label":"lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html","label":"lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1029470","label":"www.securitytracker.com/id/1029470","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html","label":"lists.opensuse.org/opensuse-updates/2013-12/msg00086.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html","label":"lists.opensuse.org/opensuse-updates/2013-12/msg00121.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201504-01","label":"security.gentoo.org/glsa/201504-01","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","label":"www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","hostname":"www.oracle.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html","label":"lists.opensuse.org/opensuse-updates/2013-12/msg00085.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html","label":"lists.opensuse.org/opensuse-updates/2014-01/msg00002.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1029476","label":"www.securitytracker.com/id/1029476","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html","label":"lists.opensuse.org/opensuse-updates/2013-12/msg00087.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html","label":"lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2052-1","label":"www.ubuntu.com/usn/USN-2052-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=917380","label":"bugzilla.mozilla.org/show_bug.cgi?id=917380","hostname":"bugzilla.mozilla.org","tags":["X Refsource CONFIRM","Exploit","Issue Tracking","Vendor Advisory"]},{"url":"http://www.mozilla.org/security/announce/2013/mfsa2013-113.html","label":"www.mozilla.org/security/announce/2013/mfsa2013-113.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2053-1","label":"www.ubuntu.com/usn/USN-2053-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html","label":"lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","Mailing List","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":["MGASA-2014-0048","OPENSUSE-SU-2024:10071-1","OPENSUSE-SU-2024:10230-1","OPENSUSE-SU-2024:14572-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:10071-1","OPENSUSE-SU-2024:10230-1","OPENSUSE-SU-2024:14572-1"]},"timeline":[{"kind":"published","date":"2013-12-11T15:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-06T17:46:22.836Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":34,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T23:01:01.618Z","stale":false,"partial":false}}