CVE-2013-0774

2013-02-1923:55:01

[email protected]

web.nvd.nist.gov

cve-2013-0774

mozilla firefox

thunderbird

seamonkey

javascript

security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

9.1 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.8%

JSON

Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent JavaScript workers from reading the browser-profile directory name, which has unspecified impact and remote attack vectors.

Affected configurations

NVD

Node

mozillafirefoxRange<19.0

mozillafirefox_esrRange<17.0.3

mozillaseamonkeyRange<2.16

mozillathunderbirdRange<17.0.3

mozillathunderbird_esrRange<17.0.3

Node

opensuseopensuseMatch11.4

opensuseopensuseMatch12.1

opensuseopensuseMatch12.2

Node

canonicalubuntu_linuxMatch10.04-

canonicalubuntu_linuxMatch11.10

canonicalubuntu_linuxMatch12.04esm

canonicalubuntu_linuxMatch12.10

CPENameOperatorVersion
mozilla:firefoxmozilla firefoxlt19.0
mozilla:firefox_esrmozilla firefox esrlt17.0.3
mozilla:seamonkeymozilla seamonkeylt2.16
mozilla:thunderbirdmozilla thunderbirdlt17.0.3
mozilla:thunderbird_esrmozilla thunderbird esrlt17.0.3

CPE	Name	Operator	Version
mozilla:firefox	mozilla firefox	lt	19.0
mozilla:firefox_esr	mozilla firefox esr	lt	17.0.3
mozilla:seamonkey	mozilla seamonkey	lt	2.16
mozilla:thunderbird	mozilla thunderbird	lt	17.0.3
mozilla:thunderbird_esr	mozilla thunderbird esr	lt	17.0.3