cve/2013/CVE-2013-1705.md
2024-06-09 00:33:16 +00:00

19 lines
823 B
Markdown

### [CVE-2013-1705](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1705)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
Heap-based buffer underflow in the cryptojs_interpret_key_gen_type function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Certificate Request Message Format (CRMF) request.
### POC
#### Reference
- https://bugzilla.mozilla.org/show_bug.cgi?id=882865
- https://bugzilla.mozilla.org/show_bug.cgi?id=882865
#### Github
No PoCs found on GitHub currently.