CVE-2013-5604

CVE-2013-5604 describes a stack-based buffer overflow vulnerability in the XSLT processor's txXPathNodeUtils::getBaseURI function within Mozilla Firefox, Thunderbird, and SeaMonkey. This flaw, due to improper data initialization, allows remote attackers to execute arbitrary code or cause a denial of service through crafted documents. With a CVSS score of 9.3, it is considered critical, indicating a network-based attack with low complexity and high impact on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.