CVE-2013-0774

MEDIO 4.3CVE-2013-0774 · Published 19/02/2013 · updated 16/06/2026

In breve

CVE-2013-0774 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda firefox (mozilla), seamonkey (mozilla), thunderbird (mozilla).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 70.6% delle vulnerabilità.
Correzione: aggiornare a 17.0.3, 19.0, 2.16 o successiva.

Package	Affected versions	Patched versions
firefox mozilla	`< 17.0.3< 19.0`	`17.0.319.0`
seamonkey mozilla	`< 2.16`	`2.16`
thunderbird mozilla	`< 17.0.3`	`17.0.3`
thunderbird esr mozilla	`< 17.0.3`	`17.0.3`

Description

Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent JavaScript workers from reading the browser-profile directory name, which has unspecified impact and remote attack vectors.

References

lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html · Mailing List
lists.opensuse.org/opensuse-updates/2013-02/msg00062.html · Mailing List
mozilla.org/security/announce/2013/mfsa2013-25.html · Vendor Advisory
ubuntu.com/usn/USN-1729-1 · Third Party Advisory
ubuntu.com/usn/USN-1729-2 · Third Party Advisory
ubuntu.com/usn/USN-1748-1 · Third Party Advisory
bugzilla.mozilla.org/show_bug.cgi · Exploit
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16797 · Third Party Advisory

Altre vulnerabilità di firefox

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

firefox

mozilla

< 17.0.3< 19.0

17.0.319.0

seamonkey

mozilla

< 2.16

2.16

thunderbird

mozilla

< 17.0.3

17.0.3

thunderbird esr

mozilla

< 17.0.3

17.0.3

Altre vulnerabilità di firefox

Vedi tutto →