Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-1672
HistoryMay 16, 2013 - 11:45 a.m.

CVE-2013-1672

2013-05-1611:45:30
CWE-264
[email protected]
web.nvd.nist.gov

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The Mozilla Maintenance Service in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 on Windows allows local users to bypass integrity verification and gain privileges via vectors involving junctions.

Affected configurations

NVD
Node
mozillafirefoxRange≤20.0.1
OR
mozillafirefoxMatch19.0
OR
mozillafirefoxMatch19.0.1
OR
mozillafirefoxMatch19.0.2
OR
mozillafirefoxMatch20.0
AND
microsoftwindows
Node
mozillafirefox_esrMatch17.0
OR
mozillafirefox_esrMatch17.0.1
OR
mozillafirefox_esrMatch17.0.2
OR
mozillafirefox_esrMatch17.0.3
OR
mozillafirefox_esrMatch17.0.4
OR
mozillafirefox_esrMatch17.0.5
AND
microsoftwindows
Node
mozillathunderbirdRange≤17.0.5
OR
mozillathunderbirdMatch17.0
OR
mozillathunderbirdMatch17.0.1
OR
mozillathunderbirdMatch17.0.2
OR
mozillathunderbirdMatch17.0.3
OR
mozillathunderbirdMatch17.0.4
AND
microsoftwindows
Node
mozillathunderbird_esrRange≤17.0.5
OR
mozillathunderbird_esrMatch17.0
OR
mozillathunderbird_esrMatch17.0.1
OR
mozillathunderbird_esrMatch17.0.2
OR
mozillathunderbird_esrMatch17.0.3
OR
mozillathunderbird_esrMatch17.0.4
AND
microsoftwindows

Related

cvelist 1
prion 1
mozilla 1
cve 1
ubuntucve 1
openvas 18
nessus 14
freebsd 1
securityvulns 1
suse 1
cvelist
cvelist
CVE-2013-1672
2013-05-16 10:00:00
prion
prion
Design/Logic Flaw
2013-05-16 11:45:00
mozilla
mozilla
Local privilege escalation through Mozilla Maintenance Service — Mozilla
2013-05-14 00:00:00
cve
cve
CVE-2013-1672
2013-05-16 11:45:30
ubuntucve
ubuntucve
CVE-2013-1672
2013-05-16 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-44) - Linux
2021-11-11 00:00:00
Mozilla Thunderbird Multiple Vulnerabilities -01 (May 2013) - Windows
2013-05-27 00:00:00
Mozilla Thunderbird Multiple Vulnerabilities -01 (May 2013) - Mac OS X
2013-05-27 00:00:00
nessus
nessus
Mozilla Thunderbird ESR 17.x < 17.0.6 Multiple Vulnerabilities
2013-05-16 00:00:00
Mozilla Thunderbird 17.x < 17.0.5 Multiple Vulnerabilities
2013-05-16 00:00:00
Thunderbird ESR 17.x < 17.0.6 Multiple Vulnerabilities (Mac OS X)
2013-05-16 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-05-14 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-07-10 00:00:00
suse
suse
Security update for Mozilla Firefox (important)
2013-07-05 22:04:14

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for NVD:CVE-2013-1672
cvelist1prion1mozilla1cve1ubuntucve1openvas18nessus14freebsd1securityvulns1suse1