Lucene search

[email protected]CVE-2013-0773

HistoryFeb 19, 2013 - 11:55 p.m.

CVE-2013-0773

2013-02-1923:55:01

[email protected]

web.nvd.nist.gov

cve-2013-0773

chrome object wrapper

system only wrapper

mozilla firefox

thunderbird

seamonkey

remote code execution

information disclosure

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.2 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.3%

JSON

The Chrome Object Wrapper (COW) and System Only Wrapper (SOW) implementations in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent modifications to a prototype, which allows remote attackers to obtain sensitive information from chrome objects or possibly execute arbitrary JavaScript code with chrome privileges via a crafted web site.

Affected configurations

NVD

Node

mozillafirefoxRange<19.0

mozillafirefox_esrRange<17.0.3

mozillaseamonkeyRange<2.16

mozillathunderbirdRange<17.0.3

mozillathunderbird_esrRange<17.0.3

Node

opensuseopensuseMatch11.4

opensuseopensuseMatch12.1

opensuseopensuseMatch12.2

Node

debiandebian_linuxMatch7.0

Node

canonicalubuntu_linuxMatch10.04-

canonicalubuntu_linuxMatch11.10

canonicalubuntu_linuxMatch12.04esm

canonicalubuntu_linuxMatch12.10

CPENameOperatorVersion
mozilla:firefoxmozilla firefoxlt19.0
mozilla:firefox_esrmozilla firefox esrlt17.0.3
mozilla:seamonkeymozilla seamonkeylt2.16
mozilla:thunderbirdmozilla thunderbirdlt17.0.3
mozilla:thunderbird_esrmozilla thunderbird esrlt17.0.3

CPE	Name	Operator	Version
mozilla:firefox	mozilla firefox	lt	19.0
mozilla:firefox_esr	mozilla firefox esr	lt	17.0.3
mozilla:seamonkey	mozilla seamonkey	lt	2.16
mozilla:thunderbird	mozilla thunderbird	lt	17.0.3
mozilla:thunderbird_esr	mozilla thunderbird esr	lt	17.0.3