5
CVE-2013-1737
- EPSS 0.42%
- Published 18.09.2013 10:08:24
- Last modified 11.04.2025 00:51:21
- Source security@mozilla.org
- Teams watchlist Login
- Open Login
Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly identify the "this" object during use of user-defined getter methods on DOM proxies, which might allow remote attackers to bypass intended access restrictions via vectors involving an expando object.
Data is provided by the National Vulnerability Database (NVD)
Mozilla ≫ Thunderbird Esr Version17.0
Mozilla ≫ Thunderbird Esr Version17.0.1
Mozilla ≫ Thunderbird Esr Version17.0.2
Mozilla ≫ Thunderbird Esr Version17.0.3
Mozilla ≫ Thunderbird Esr Version17.0.4
Mozilla ≫ Thunderbird Esr Version17.0.5
Mozilla ≫ Thunderbird Esr Version17.0.6
Mozilla ≫ Thunderbird Esr Version17.0.7
Mozilla ≫ Thunderbird Esr Version17.0.8
Mozilla ≫ Thunderbird Version <= 17.0.9
Mozilla ≫ Thunderbird Version17.0
Mozilla ≫ Thunderbird Version17.0.1
Mozilla ≫ Thunderbird Version17.0.2
Mozilla ≫ Thunderbird Version17.0.3
Mozilla ≫ Thunderbird Version17.0.4
Mozilla ≫ Thunderbird Version17.0.5
Mozilla ≫ Thunderbird Version17.0.6
Mozilla ≫ Thunderbird Version17.0.7
Mozilla ≫ Thunderbird Version17.0.8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Type | Source | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 0.42% | 0.609 |
Source | Base Score | Exploit Score | Impact Score | Vector string |
---|---|---|---|---|
nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|