CVE-2013-0765

EPSS 1.42%
Veröffentlicht 19.02.2013 23:55:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle security@mozilla.org
Teams Watchlist Login
Unerledigt Login

Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 do not prevent multiple wrapping of WebIDL objects, which allows remote attackers to bypass intended access restrictions via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 19.0

Mozilla ≫ Seamonkey Version < 2.16

Opensuse ≫ Opensuse Version11.4

Opensuse ≫ Opensuse Version12.1

Opensuse ≫ Opensuse Version12.2

Canonical ≫ Ubuntu Linux Version10.04 SwEdition-

Canonical ≫ Ubuntu Linux Version11.10

Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm

Canonical ≫ Ubuntu Linux Version12.10

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.42%	0.788

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html

Third Party Advisory

Mailing List

http://www.mozilla.org/security/announce/2013/mfsa2013-23.html

Third Party Advisory

Vendor Advisory

http://www.ubuntu.com/usn/USN-1729-1

Third Party Advisory

http://www.ubuntu.com/usn/USN-1729-2

Third Party Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=830614

Patch

Vendor Advisory

Issue Tracking

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17097

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-0765

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-0765

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-0765

EUVD