CVE-2013-1892

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 44.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-10-01 · updated 2026-06-16
Weakness: CWE-20

Description

MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote authenticated users to cause a denial of service (invalid memory access and server crash) or execute arbitrary code via a crafted memory address in the first argument.

Affected products

MongoDB: through 2.0.8; 1.2.0, 1.4.0, 1.6.0, 1.8.0, 2.0.0, 2.0.1 (+10)
RedHat Enterprise Mrg: 2.3

References

http://blog.scrt.ch/2013/03/24/mongodb-0-day-ssji-to-rce/
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101630.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101679.html
http://rhn.redhat.com/errata/RHSA-2013-1170.html
http://www.exploit-db.com/exploits/24935
http://www.exploit-db.com/exploits/24947
http://www.mongodb.org/about/alerts/
http://www.openwall.com/lists/oss-security/2013/03/25/9
https://jira.mongodb.org/browse/SERVER-9124
http://blog.scrt.ch/2013/03/24/mongodb-0-day-ssji-to-rce/
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101630.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101679.html

Get alerted when CVE-2013-1892 or the next vulnerability affects your stack