Ubuntu.comUB:CVE-2013-0748CVE-2013-0748
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
70.2%
The XBL.proto.toString implementation in Mozilla Firefox before 18.0,
Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before
17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and
SeaMonkey before 2.15 makes it easier for remote attackers to bypass the
ASLR protection mechanism by calling the toString function of an XBL
object.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | firefox | < 18.0+build1-0ubuntu0.10.04.3 | UNKNOWN |
| ubuntu | 11.10 | noarch | firefox | < 18.0+build1-0ubuntu0.11.10.3 | UNKNOWN |
| ubuntu | 12.04 | noarch | firefox | < 18.0+build1-0ubuntu0.12.04.3 | UNKNOWN |
| ubuntu | 12.10 | noarch | firefox | < 18.0+build1-0ubuntu0.12.10.3 | UNKNOWN |
| ubuntu | 13.04 | noarch | firefox | < 19.0~b1+build2-0ubuntu1 | UNKNOWN |
| ubuntu | 13.10 | noarch | firefox | < 19.0~b1+build2-0ubuntu1 | UNKNOWN |
| ubuntu | 10.04 | noarch | thunderbird | < 17.0.2+build1-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 11.10 | noarch | thunderbird | < 17.0.2+build1-0ubuntu0.11.10.1 | UNKNOWN |
| ubuntu | 12.04 | noarch | thunderbird | < 17.0.2+build1-0ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 12.10 | noarch | thunderbird | < 17.0.2+build1-0ubuntu0.12.10.1 | UNKNOWN |
Related
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
70.2%