Lucene search

[email protected]NVD:CVE-2013-1713

HistoryAug 07, 2013 - 1:55 a.m.

CVE-2013-1713

2013-08-0701:55:04

CWE-264

[email protected]

web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.2%

JSON

Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks or install arbitrary add-ons via a crafted web site.

Affected configurations

NVD

Node

mozillafirefoxRange≤22.0

mozillafirefoxMatch19.0

mozillafirefoxMatch19.0.1

mozillafirefoxMatch19.0.2

mozillafirefoxMatch20.0

mozillafirefoxMatch20.0.1

mozillafirefoxMatch21.0

Node

mozillaseamonkeyRange≤2.20beta3

mozillaseamonkeyMatch2.0

mozillaseamonkeyMatch2.0alpha_1

mozillaseamonkeyMatch2.0alpha_2

mozillaseamonkeyMatch2.0alpha_3

mozillaseamonkeyMatch2.0beta_1

mozillaseamonkeyMatch2.0beta_2

mozillaseamonkeyMatch2.0rc1

mozillaseamonkeyMatch2.0rc2

mozillaseamonkeyMatch2.0.1

mozillaseamonkeyMatch2.0.2

mozillaseamonkeyMatch2.0.3

mozillaseamonkeyMatch2.0.4

mozillaseamonkeyMatch2.0.5

mozillaseamonkeyMatch2.0.6

mozillaseamonkeyMatch2.0.7

mozillaseamonkeyMatch2.0.8

mozillaseamonkeyMatch2.0.9

mozillaseamonkeyMatch2.0.10

mozillaseamonkeyMatch2.0.11

mozillaseamonkeyMatch2.0.12

mozillaseamonkeyMatch2.0.13

mozillaseamonkeyMatch2.0.14

mozillaseamonkeyMatch2.1

mozillaseamonkeyMatch2.1alpha1

mozillaseamonkeyMatch2.1alpha2

mozillaseamonkeyMatch2.1alpha3

mozillaseamonkeyMatch2.1beta1

mozillaseamonkeyMatch2.1beta2

mozillaseamonkeyMatch2.1beta3

mozillaseamonkeyMatch2.1rc1

mozillaseamonkeyMatch2.1rc2

mozillaseamonkeyMatch2.2

mozillaseamonkeyMatch2.2beta1

mozillaseamonkeyMatch2.2beta2

mozillaseamonkeyMatch2.2beta3

mozillaseamonkeyMatch2.3

mozillaseamonkeyMatch2.3beta1

mozillaseamonkeyMatch2.3beta2

mozillaseamonkeyMatch2.3beta3

mozillaseamonkeyMatch2.3.1

mozillaseamonkeyMatch2.3.2

mozillaseamonkeyMatch2.3.3

mozillaseamonkeyMatch2.4

mozillaseamonkeyMatch2.4beta1

mozillaseamonkeyMatch2.4beta2

mozillaseamonkeyMatch2.4beta3

mozillaseamonkeyMatch2.4.1

mozillaseamonkeyMatch2.5

mozillaseamonkeyMatch2.5beta1

mozillaseamonkeyMatch2.5beta2

mozillaseamonkeyMatch2.5beta3

mozillaseamonkeyMatch2.5beta4

mozillaseamonkeyMatch2.6

mozillaseamonkeyMatch2.6beta1

mozillaseamonkeyMatch2.6beta2

mozillaseamonkeyMatch2.6beta3

mozillaseamonkeyMatch2.6beta4

mozillaseamonkeyMatch2.6.1

mozillaseamonkeyMatch2.7

mozillaseamonkeyMatch2.7beta1

mozillaseamonkeyMatch2.7beta2

mozillaseamonkeyMatch2.7beta3

mozillaseamonkeyMatch2.7beta4

mozillaseamonkeyMatch2.7beta5

mozillaseamonkeyMatch2.7.1

mozillaseamonkeyMatch2.7.2

mozillaseamonkeyMatch2.8

mozillaseamonkeyMatch2.8beta1

mozillaseamonkeyMatch2.8beta2

mozillaseamonkeyMatch2.8beta3

mozillaseamonkeyMatch2.8beta4

mozillaseamonkeyMatch2.8beta5

mozillaseamonkeyMatch2.8beta6

mozillaseamonkeyMatch2.9

mozillaseamonkeyMatch2.9beta1

mozillaseamonkeyMatch2.9beta2

mozillaseamonkeyMatch2.9beta3

mozillaseamonkeyMatch2.9beta4

mozillaseamonkeyMatch2.9.1

mozillaseamonkeyMatch2.10

mozillaseamonkeyMatch2.10beta1

mozillaseamonkeyMatch2.10beta2

mozillaseamonkeyMatch2.10beta3

mozillaseamonkeyMatch2.10.1

mozillaseamonkeyMatch2.11

mozillaseamonkeyMatch2.11beta1

mozillaseamonkeyMatch2.11beta2

mozillaseamonkeyMatch2.11beta3

mozillaseamonkeyMatch2.11beta4

mozillaseamonkeyMatch2.11beta5

mozillaseamonkeyMatch2.11beta6

mozillaseamonkeyMatch2.12

mozillaseamonkeyMatch2.12beta1

mozillaseamonkeyMatch2.12beta2

mozillaseamonkeyMatch2.12beta3

mozillaseamonkeyMatch2.12beta4

mozillaseamonkeyMatch2.12beta5

mozillaseamonkeyMatch2.12beta6

mozillaseamonkeyMatch2.12.1

mozillaseamonkeyMatch2.13

mozillaseamonkeyMatch2.13beta1

mozillaseamonkeyMatch2.13beta2

mozillaseamonkeyMatch2.13beta3

mozillaseamonkeyMatch2.13beta4

mozillaseamonkeyMatch2.13beta5

mozillaseamonkeyMatch2.13beta6

mozillaseamonkeyMatch2.13.1

mozillaseamonkeyMatch2.13.2

mozillaseamonkeyMatch2.14

mozillaseamonkeyMatch2.14beta1

mozillaseamonkeyMatch2.14beta2

mozillaseamonkeyMatch2.14beta3

mozillaseamonkeyMatch2.14beta4

mozillaseamonkeyMatch2.14beta5

mozillaseamonkeyMatch2.15

mozillaseamonkeyMatch2.15beta1

mozillaseamonkeyMatch2.15beta2

mozillaseamonkeyMatch2.15beta3

mozillaseamonkeyMatch2.15beta4

mozillaseamonkeyMatch2.15beta5

mozillaseamonkeyMatch2.15beta6

mozillaseamonkeyMatch2.15.1

mozillaseamonkeyMatch2.15.2

mozillaseamonkeyMatch2.16

mozillaseamonkeyMatch2.16beta1

mozillaseamonkeyMatch2.16beta2

mozillaseamonkeyMatch2.16beta3

mozillaseamonkeyMatch2.16beta4

mozillaseamonkeyMatch2.16beta5

mozillaseamonkeyMatch2.16.1

mozillaseamonkeyMatch2.16.2

mozillaseamonkeyMatch2.17

mozillaseamonkeyMatch2.17beta1

mozillaseamonkeyMatch2.17beta2

mozillaseamonkeyMatch2.17beta3

mozillaseamonkeyMatch2.17beta4

mozillaseamonkeyMatch2.17.1

mozillaseamonkeyMatch2.18beta1

mozillaseamonkeyMatch2.18beta2

mozillaseamonkeyMatch2.18beta3

mozillaseamonkeyMatch2.18beta4

mozillaseamonkeyMatch2.19

mozillaseamonkeyMatch2.19beta1

mozillaseamonkeyMatch2.19beta2

mozillaseamonkeyMatch2.20beta1

mozillaseamonkeyMatch2.20beta2

Node

mozillathunderbirdRange≤17.0.7

mozillathunderbirdMatch17.0

mozillathunderbirdMatch17.0.1

mozillathunderbirdMatch17.0.2

mozillathunderbirdMatch17.0.3

mozillathunderbirdMatch17.0.4

mozillathunderbirdMatch17.0.5

mozillathunderbirdMatch17.0.6

Node

mozillafirefox_esrMatch17.0

mozillafirefox_esrMatch17.0.1

mozillafirefox_esrMatch17.0.2

mozillafirefox_esrMatch17.0.3

mozillafirefox_esrMatch17.0.4

mozillafirefox_esrMatch17.0.5

mozillafirefox_esrMatch17.0.6

mozillafirefox_esrMatch17.0.7

Node

mozillathunderbird_esrMatch17.0

mozillathunderbird_esrMatch17.0.1

mozillathunderbird_esrMatch17.0.2

mozillathunderbird_esrMatch17.0.3

mozillathunderbird_esrMatch17.0.4

mozillathunderbird_esrMatch17.0.5

mozillathunderbird_esrMatch17.0.6

mozillathunderbird_esrMatch17.0.7

References

www.debian.org/security/2013/dsa-2735

www.debian.org/security/2013/dsa-2746

www.mozilla.org/security/announce/2013/mfsa2013-72.html

www.securityfocus.com/bid/61876

bugzilla.mozilla.org/show_bug.cgi?id=887098

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18884

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.2%

JSON

Related for NVD:CVE-2013-1713

prion1 cve1 mozilla1 cvelist1 openvas54 ubuntucve1 redhat2 nessus33 debian2 mageia2 ubuntu3 centos2 veracode5 osv2 oraclelinux2 suse6 ibm2 freebsd1 securityvulns1 gentoo1