Lucene search
Mozilla FoundationMFSA2013-15HistoryJan 08, 2013 - 12:00 a.m.
Privilege escalation through plugin objects — Mozilla
2013-01-0800:00:00
Mozilla Foundation
www.mozilla.org
29
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.065
Percentile
93.8%
Security researcher Mariusz Mlynski reported that it is possible to open a chrome privileged web page through plugin objects through interaction with SVG elements. This could allow for arbitrary code execution.
Affected configurations
Node
mozillafirefoxRange<18
ORmozillafirefox_esrRange<10.0.12
ORmozillafirefox_esrRange<17.0.2
ORmozillaseamonkeyRange<2.15
ORmozillathunderbirdRange<17.0.2
ORmozillathunderbird_esrRange<10.0.12
ORmozillathunderbird_esrRange<17.0.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | firefox | * | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* |
| mozilla | firefox_esr | * | cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* |
| mozilla | seamonkey | * | cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:* |
| mozilla | thunderbird | * | cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
| mozilla | thunderbird_esr | * | cpe:2.3:a:mozilla:thunderbird_esr:*:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2013-0758
2013-01-09 00:00:00
prion
prion
Design/Logic Flaw
2013-01-13 20:55:00
cvelist
cvelist
CVE-2013-0758
2013-01-13 20:00:00
nvd
nvd
CVE-2013-0758
2013-01-13 20:55:02
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox Flash Privileged Code Injection (CVE-2013-0758)
2013-07-09 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-15) - Linux
2021-11-11 00:00:00
Mozilla Products Multiple Vulnerabilities January13 (Mac OS X)
2013-01-16 00:00:00
Mozilla Products Multiple Vulnerabilities (Jan 2013) - Mac OS X
2013-01-16 00:00:00
cve
cve
CVE-2013-0758
2013-01-13 20:55:02
exploitdb
exploitdb
zdt
zdt
Mozilla Firefox < 17.0.1 - Flash Privileged Code Injection Exploit
2017-03-23 00:00:00
GIT 1.8.5.6 / 1.9.5 / 2.0.5 / 2.1.4/ 2.2.1 & Mercurial < 3.2.3 - Exploit
2017-03-23 00:00:00
metasploit
metasploit
Firefox 17.0.1 Flash Privileged Code Injection
2013-05-16 04:52:51
nessus
nessus
RHEL 5 / 6 : thunderbird (RHSA-2013:0145)
2013-01-09 00:00:00
Scientific Linux Security Update : thunderbird on SL5.x, SL6.x i386/x86_64 (20130108)
2013-01-11 00:00:00
Oracle Linux 6 : thunderbird (ELSA-2013-0145)
2013-07-12 00:00:00
centos
centos
thunderbird security update
2013-01-09 05:51:41
firefox, xulrunner security update
2013-01-09 05:51:05
redhat
redhat
(RHSA-2013:0144) Critical: firefox security update
2013-01-08 00:00:00
(RHSA-2013:0145) Critical: thunderbird security update
2013-01-08 00:00:00
veracode
veracode
Memory Corruption
2019-05-02 04:45:41
Use-After-Free
2019-05-02 04:45:40
Out-Of-Bounds Read
2019-05-02 04:45:40
oraclelinux
oraclelinux
thunderbird security update
2013-01-08 00:00:00
firefox security update
2013-01-08 00:00:00
suse
suse
Security update for Mozilla Firefox (important)
2013-02-18 18:04:29
Mozilla Januarys (important)
2013-01-23 14:04:54
Security update for MozillaFirefox (important)
2013-01-18 19:04:49
ibm
ibm
ubuntu
ubuntu
Thunderbird vulnerabilities
2013-01-09 00:00:00
Firefox regression
2013-01-22 00:00:00
Firefox regression
2013-02-05 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-01-08 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-01-10 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-09-27 00:00:00
osv
osv
MozillaThunderbird-45.5.1-1.1 on GA media
2024-06-15 00:00:00
MozillaFirefox-50.1.0-1.1 on GA media
2024-06-15 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.065
Percentile
93.8%
Related for MFSA2013-15