CVE-2013-0765

EPSS 1.42%
Published 19.02.2013 23:55:01
Last modified 11.04.2025 00:51:21
Source security@mozilla.org
Teams watchlist Login
Open Login

Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 do not prevent multiple wrapping of WebIDL objects, which allows remote attackers to bypass intended access restrictions via unspecified vectors.

Affected products Warnungen 0 Metrics 2 CWE 0 References 10

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 19.0

Mozilla ≫ Seamonkey Version < 2.16

Opensuse ≫ Opensuse Version11.4

Opensuse ≫ Opensuse Version12.1

Opensuse ≫ Opensuse Version12.2

Canonical ≫ Ubuntu Linux Version10.04 SwEdition-

Canonical ≫ Ubuntu Linux Version11.10

Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm

Canonical ≫ Ubuntu Linux Version12.10

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.42%	0.788

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html

Third Party Advisory

Mailing List

http://www.mozilla.org/security/announce/2013/mfsa2013-23.html

Third Party Advisory

Vendor Advisory

http://www.ubuntu.com/usn/USN-1729-1

Third Party Advisory

http://www.ubuntu.com/usn/USN-1729-2

Third Party Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=830614

Patch

Vendor Advisory

Issue Tracking

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17097

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-0765

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-0765

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-0765

EUVD