Lucene search
Mozilla FoundationMFSA2013-14HistoryJan 08, 2013 - 12:00 a.m.
Chrome Object Wrapper (COW) bypass through changing prototype — Mozilla
2013-01-0800:00:00
Mozilla Foundation
www.mozilla.org
24
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.095 Low
EPSS
Percentile
94.7%
Security researcher Mariusz Mlynski reported that it is possible to change the prototype of an object and bypass Chrome Object Wrappers (COW) to gain access to chrome privileged functions. This could allow for arbitrary code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox | lt | 18 | |
| firefox esr | lt | 17.0.2 | |
| seamonkey | lt | 2.15 | |
| thunderbird | lt | 17.0.2 | |
| thunderbird esr | lt | 17.0.2 |
Related
prion
prion
Design/Logic Flaw
2013-01-13 20:55:00
ubuntucve
ubuntucve
CVE-2013-0757
2013-01-09 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-14) - Linux
2021-11-11 00:00:00
Mozilla Products Multiple Vulnerabilities-04 January13 (Windows)
2013-01-16 00:00:00
Mozilla Products Multiple Vulnerabilities-04 January13 (Mac OS X)
2013-01-16 00:00:00
cve
cve
CVE-2013-0757
2013-01-13 20:55:00
metasploit
metasploit
Firefox 17.0.1 Flash Privileged Code Injection
2013-05-16 04:52:51
zdt
zdt
GIT 1.8.5.6 / 1.9.5 / 2.0.5 / 2.1.4/ 2.2.1 & Mercurial < 3.2.3 - Exploit
2017-03-23 00:00:00
Mozilla Firefox < 17.0.1 - Flash Privileged Code Injection Exploit
2017-03-23 00:00:00
checkpoint_advisories
checkpoint_advisories
exploitdb
exploitdb
Mozilla Firefox < 17.0.1 - Flash Privileged Code Injection (Metasploit)
2013-01-08 00:00:00
nessus
nessus
Firefox ESR 17.x < 17.0.2 Multiple Vulnerabilities
2013-01-15 00:00:00
Firefox ESR < 17.0.2 Multiple Vulnerabilities (Mac OS X)
2013-01-15 00:00:00
Thunderbird < 17.0.2 Multiple Vulnerabilities (Mac OS X)
2013-01-15 00:00:00
suse
suse
Security update for Mozilla Firefox (important)
2013-02-18 18:04:29
Security update for MozillaFirefox (important)
2013-02-13 23:04:32
Mozilla Januarys (important)
2013-01-23 14:04:54
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-01-10 00:00:00
ubuntu
ubuntu
Firefox regression
2013-01-22 00:00:00
Thunderbird vulnerabilities
2013-01-09 00:00:00
Firefox vulnerabilities
2013-01-09 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-01-08 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-09-27 00:00:00
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.095 Low
EPSS
Percentile
94.7%
Related for MFSA2013-14