6.9

CVE-2013-1672

The Mozilla Maintenance Service in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 on Windows allows local users to bypass integrity verification and gain privileges via vectors involving junctions.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
MozillaFirefox Version <= 20.0.1
   MicrosoftWindows
MozillaFirefox Version19.0
   MicrosoftWindows
MozillaFirefox Version19.0.1
   MicrosoftWindows
MozillaFirefox Version19.0.2
   MicrosoftWindows
MozillaFirefox Version20.0
   MicrosoftWindows
MozillaFirefox Version17.0
   MicrosoftWindows
MozillaFirefox Version17.0.1
   MicrosoftWindows
MozillaFirefox Version17.0.2
   MicrosoftWindows
MozillaFirefox Version17.0.3
   MicrosoftWindows
MozillaFirefox Version17.0.4
   MicrosoftWindows
MozillaFirefox Version17.0.5
   MicrosoftWindows
MozillaThunderbird Version <= 17.0.5
   MicrosoftWindows
MozillaThunderbird Version17.0
   MicrosoftWindows
MozillaThunderbird Version17.0.1
   MicrosoftWindows
MozillaThunderbird Version17.0.2
   MicrosoftWindows
MozillaThunderbird Version17.0.3
   MicrosoftWindows
MozillaThunderbird Version17.0.4
   MicrosoftWindows
MozillaThunderbird Esr Version <= 17.0.5
   MicrosoftWindows
MozillaThunderbird Esr Version17.0
   MicrosoftWindows
MozillaThunderbird Esr Version17.0.1
   MicrosoftWindows
MozillaThunderbird Esr Version17.0.2
   MicrosoftWindows
MozillaThunderbird Esr Version17.0.3
   MicrosoftWindows
MozillaThunderbird Esr Version17.0.4
   MicrosoftWindows
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.02% 0.019
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C