CVE-2013-1717
- EPSS 0.57%
- Published 07.08.2013 01:55:05
- Last modified 11.04.2025 00:51:21
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly restrict local-filesystem access by Java applets, which allows user-assisted remote ...
- EPSS 3.55%
- Published 07.08.2013 01:55:04
- Last modified 11.04.2025 00:51:21
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allow remote attackers to cause a deni...
- EPSS 1.24%
- Published 07.08.2013 01:55:04
- Last modified 11.04.2025 00:51:21
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via u...
CVE-2013-1704
- EPSS 4.7%
- Published 07.08.2013 01:55:04
- Last modified 11.04.2025 00:51:21
Use-after-free vulnerability in the nsINode::GetParentNode function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash)...
- EPSS 5.28%
- Published 07.08.2013 01:55:04
- Last modified 11.04.2025 00:51:21
Heap-based buffer underflow in the cryptojs_interpret_key_gen_type function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Cert...
CVE-2013-1708
- EPSS 5.28%
- Published 07.08.2013 01:55:04
- Last modified 11.04.2025 00:51:21
Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (application crash) via a crafted WAV file that is not properly handled by the nsCString::CharAt function.
CVE-2013-1709
- EPSS 0.52%
- Published 07.08.2013 01:55:04
- Last modified 11.04.2025 00:51:21
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly handle the interaction between FRAME elements and history, which allows remote attac...
- EPSS 79.22%
- Published 07.08.2013 01:55:04
- Last modified 11.04.2025 00:51:21
The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to execute arbitrary JavaScript c...
CVE-2013-1711
- EPSS 1.87%
- Published 07.08.2013 01:55:04
- Last modified 11.04.2025 00:51:21
The XrayWrapper implementation in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 does not properly address the possibility of an XBL scope bypass resulting from non-native arguments in XBL function calls, which makes it easier for remote attac...
CVE-2013-1713
- EPSS 0.47%
- Published 07.08.2013 01:55:04
- Last modified 11.04.2025 00:51:21
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, wh...