6.9

CVE-2013-1672

The Mozilla Maintenance Service in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 on Windows allows local users to bypass integrity verification and gain privileges via vectors involving junctions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version <= 20.0.1
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version 19.0
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version 19.0.1
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version 19.0.2
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version 20.0
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version 17.0
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version 17.0.1
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version 17.0.2
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version 17.0.3
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version 17.0.4
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version 17.0.5
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Version <= 17.0.5
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Version 17.0
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Version 17.0.1
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Version 17.0.2
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Version 17.0.3
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Version 17.0.4
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Esr Version <= 17.0.5
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Esr Version 17.0
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Esr Version 17.0.1
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Esr Version 17.0.2
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Esr Version 17.0.3
   Microsoft ≫ Windows
Mozilla ≫ Thunderbird Esr Version 17.0.4
   Microsoft ≫ Windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.33% 0.248
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.mozilla.org/security/announce/2013/mfsa2013-44.html
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=850492
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16915