6.8

CVE-2013-1730

Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly handle movement of XBL-backed nodes between documents, which allows remote attackers to execute arbitrary code or cause a denial of service (JavaScript compartment mismatch, or assertion failure and application exit) via a crafted web site.

Data is provided by the National Vulnerability Database (NVD)
Mozilla ≫ Thunderbird Version <= 17.0.9
Mozilla ≫ Thunderbird Version17.0
Mozilla ≫ Thunderbird Version17.0.1
Mozilla ≫ Thunderbird Version17.0.2
Mozilla ≫ Thunderbird Version17.0.3
Mozilla ≫ Thunderbird Version17.0.4
Mozilla ≫ Thunderbird Version17.0.5
Mozilla ≫ Thunderbird Version17.0.6
Mozilla ≫ Thunderbird Version17.0.7
Mozilla ≫ Thunderbird Version17.0.8
Mozilla ≫ Seamonkey Version <= 2.20
Mozilla ≫ Seamonkey Version2.0
Mozilla ≫ Seamonkey Version2.0 Updatealpha_1
Mozilla ≫ Seamonkey Version2.0 Updatealpha_2
Mozilla ≫ Seamonkey Version2.0 Updatealpha_3
Mozilla ≫ Seamonkey Version2.0 Updatebeta_1
Mozilla ≫ Seamonkey Version2.0 Updatebeta_2
Mozilla ≫ Seamonkey Version2.0 Updaterc1
Mozilla ≫ Seamonkey Version2.0 Updaterc2
Mozilla ≫ Seamonkey Version2.0.1
Mozilla ≫ Seamonkey Version2.0.2
Mozilla ≫ Seamonkey Version2.0.3
Mozilla ≫ Seamonkey Version2.0.4
Mozilla ≫ Seamonkey Version2.0.5
Mozilla ≫ Seamonkey Version2.0.6
Mozilla ≫ Seamonkey Version2.0.7
Mozilla ≫ Seamonkey Version2.0.8
Mozilla ≫ Seamonkey Version2.0.9
Mozilla ≫ Seamonkey Version2.0.10
Mozilla ≫ Seamonkey Version2.0.11
Mozilla ≫ Seamonkey Version2.0.12
Mozilla ≫ Seamonkey Version2.0.13
Mozilla ≫ Seamonkey Version2.0.14
Mozilla ≫ Seamonkey Version2.1
Mozilla ≫ Seamonkey Version2.1 Updatealpha1
Mozilla ≫ Seamonkey Version2.1 Updatealpha2
Mozilla ≫ Seamonkey Version2.1 Updatealpha3
Mozilla ≫ Seamonkey Version2.1 Updatebeta1
Mozilla ≫ Seamonkey Version2.1 Updatebeta2
Mozilla ≫ Seamonkey Version2.1 Updatebeta3
Mozilla ≫ Seamonkey Version2.1 Updaterc1
Mozilla ≫ Seamonkey Version2.1 Updaterc2
Mozilla ≫ Seamonkey Version2.10
Mozilla ≫ Seamonkey Version2.10 Updatebeta1
Mozilla ≫ Seamonkey Version2.10 Updatebeta2
Mozilla ≫ Seamonkey Version2.10 Updatebeta3
Mozilla ≫ Seamonkey Version2.10.1
Mozilla ≫ Seamonkey Version2.11
Mozilla ≫ Seamonkey Version2.11 Updatebeta1
Mozilla ≫ Seamonkey Version2.11 Updatebeta2
Mozilla ≫ Seamonkey Version2.11 Updatebeta3
Mozilla ≫ Seamonkey Version2.11 Updatebeta4
Mozilla ≫ Seamonkey Version2.11 Updatebeta5
Mozilla ≫ Seamonkey Version2.11 Updatebeta6
Mozilla ≫ Seamonkey Version2.12
Mozilla ≫ Seamonkey Version2.12 Updatebeta1
Mozilla ≫ Seamonkey Version2.12 Updatebeta2
Mozilla ≫ Seamonkey Version2.12 Updatebeta3
Mozilla ≫ Seamonkey Version2.12 Updatebeta4
Mozilla ≫ Seamonkey Version2.12 Updatebeta5
Mozilla ≫ Seamonkey Version2.12 Updatebeta6
Mozilla ≫ Seamonkey Version2.12.1
Mozilla ≫ Seamonkey Version2.13
Mozilla ≫ Seamonkey Version2.13 Updatebeta1
Mozilla ≫ Seamonkey Version2.13 Updatebeta2
Mozilla ≫ Seamonkey Version2.13 Updatebeta3
Mozilla ≫ Seamonkey Version2.13 Updatebeta4
Mozilla ≫ Seamonkey Version2.13 Updatebeta5
Mozilla ≫ Seamonkey Version2.13 Updatebeta6
Mozilla ≫ Seamonkey Version2.13.1
Mozilla ≫ Seamonkey Version2.13.2
Mozilla ≫ Seamonkey Version2.14
Mozilla ≫ Seamonkey Version2.14 Updatebeta1
Mozilla ≫ Seamonkey Version2.14 Updatebeta2
Mozilla ≫ Seamonkey Version2.14 Updatebeta3
Mozilla ≫ Seamonkey Version2.14 Updatebeta4
Mozilla ≫ Seamonkey Version2.14 Updatebeta5
Mozilla ≫ Seamonkey Version2.15
Mozilla ≫ Seamonkey Version2.15 Updatebeta1
Mozilla ≫ Seamonkey Version2.15 Updatebeta2
Mozilla ≫ Seamonkey Version2.15 Updatebeta3
Mozilla ≫ Seamonkey Version2.15 Updatebeta4
Mozilla ≫ Seamonkey Version2.15 Updatebeta5
Mozilla ≫ Seamonkey Version2.15 Updatebeta6
Mozilla ≫ Seamonkey Version2.15.1
Mozilla ≫ Seamonkey Version2.15.2
Mozilla ≫ Seamonkey Version2.16
Mozilla ≫ Seamonkey Version2.16 Updatebeta1
Mozilla ≫ Seamonkey Version2.16 Updatebeta2
Mozilla ≫ Seamonkey Version2.16 Updatebeta3
Mozilla ≫ Seamonkey Version2.16 Updatebeta4
Mozilla ≫ Seamonkey Version2.16 Updatebeta5
Mozilla ≫ Seamonkey Version2.16.1
Mozilla ≫ Seamonkey Version2.16.2
Mozilla ≫ Seamonkey Version2.17
Mozilla ≫ Seamonkey Version2.17 Updatebeta1
Mozilla ≫ Seamonkey Version2.17 Updatebeta2
Mozilla ≫ Seamonkey Version2.17 Updatebeta3
Mozilla ≫ Seamonkey Version2.17 Updatebeta4
Mozilla ≫ Seamonkey Version2.17.1
Mozilla ≫ Seamonkey Version2.18 Updatebeta1
Mozilla ≫ Seamonkey Version2.18 Updatebeta2
Mozilla ≫ Seamonkey Version2.18 Updatebeta3
Mozilla ≫ Seamonkey Version2.18 Updatebeta4
Mozilla ≫ Seamonkey Version2.19
Mozilla ≫ Seamonkey Version2.19 Updatebeta1
Mozilla ≫ Seamonkey Version2.19 Updatebeta2
Mozilla ≫ Seamonkey Version2.20 Updatebeta1
Mozilla ≫ Seamonkey Version2.20 Updatebeta2
Mozilla ≫ Seamonkey Version2.20 Updatebeta3
Mozilla ≫ Firefox Version17.0
Mozilla ≫ Firefox Version17.0.1
Mozilla ≫ Firefox Version17.0.2
Mozilla ≫ Firefox Version17.0.3
Mozilla ≫ Firefox Version17.0.4
Mozilla ≫ Firefox Version17.0.5
Mozilla ≫ Firefox Version17.0.6
Mozilla ≫ Firefox Version17.0.7
Mozilla ≫ Firefox Version17.0.8
Mozilla ≫ Firefox Version <= 23.0.1
Mozilla ≫ Firefox Version19.0
Mozilla ≫ Firefox Version19.0.1
Mozilla ≫ Firefox Version19.0.2
Mozilla ≫ Firefox Version20.0
Mozilla ≫ Firefox Version20.0.1
Mozilla ≫ Firefox Version21.0
Mozilla ≫ Firefox Version22.0
Mozilla ≫ Firefox Version23.0
Mozilla ≫ Thunderbird Esr Version17.0
Mozilla ≫ Thunderbird Esr Version17.0.1
Mozilla ≫ Thunderbird Esr Version17.0.2
Mozilla ≫ Thunderbird Esr Version17.0.3
Mozilla ≫ Thunderbird Esr Version17.0.4
Mozilla ≫ Thunderbird Esr Version17.0.5
Mozilla ≫ Thunderbird Esr Version17.0.6
Mozilla ≫ Thunderbird Esr Version17.0.7
Mozilla ≫ Thunderbird Esr Version17.0.8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.73% 0.717
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.