9.3

CVE-2013-0770

Exploit

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version < 10.0.12
Mozilla ≫ Firefox Version < 18.0
Mozilla ≫ Firefox Version >= 17.0 < 17.0.2
Mozilla ≫ Seamonkey Version < 2.15
Mozilla ≫ Thunderbird Version < 17.0.2
Mozilla ≫ Thunderbird Esr Version < 10.0.12
Mozilla ≫ Thunderbird Esr Version >= 17.0 < 17.0.2
Opensuse ≫ Opensuse Version11.4
Opensuse ≫ Opensuse Version12.1
Opensuse ≫ Opensuse Version12.2
Suse ≫ Linux Enterprise Desktop Version10 Updatesp4
Suse ≫ Linux Enterprise Desktop Version11 Updatesp2
Suse ≫ Linux Enterprise Server Version10 Updatesp4
Suse ≫ Linux Enterprise Server Version11 Updatesp2 SwPlatform-
Suse ≫ Linux Enterprise Server Version11 Updatesp2 SwPlatformvmware
Canonical ≫ Ubuntu Linux Version10.04 SwEdition-
Canonical ≫ Ubuntu Linux Version11.10
Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version12.10
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.94% 0.752
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
https://bugzilla.mozilla.org/show_bug.cgi?id=756581
Patch
Vendor Advisory
Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=768750
Patch
Vendor Advisory
Exploit
Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=787818
Patch
Vendor Advisory
Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=795284
Patch
Vendor Advisory
Issue Tracking