4.3

CVE-2013-0774

Exploit

Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent JavaScript workers from reading the browser-profile directory name, which has unspecified impact and remote attack vectors.

Data is provided by the National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version < 17.0.3
Mozilla ≫ Firefox Version < 19.0
Mozilla ≫ Seamonkey Version < 2.16
Mozilla ≫ Thunderbird Version < 17.0.3
Mozilla ≫ Thunderbird Esr Version < 17.0.3
Opensuse ≫ Opensuse Version11.4
Opensuse ≫ Opensuse Version12.1
Opensuse ≫ Opensuse Version12.2
Canonical ≫ Ubuntu Linux Version10.04 SwEdition-
Canonical ≫ Ubuntu Linux Version11.10
Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version12.10
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.55% 0.653
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
https://bugzilla.mozilla.org/show_bug.cgi?id=827193
Patch
Vendor Advisory
Exploit
Issue Tracking