Ubuntu.comUB:CVE-2013-0795CVE-2013-0795
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.011 Low
EPSS
Percentile
84.6%
The System Only Wrapper (SOW) implementation in Mozilla Firefox before
20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5,
Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 does not
prevent use of the cloneNode method for cloning a protected node, which
allows remote attackers to bypass the Same Origin Policy or possibly
execute arbitrary JavaScript code with chrome privileges via a crafted web
site.
Notes
| Author | Note |
|---|---|
| jdstrand | xulrunner-1.9.2 unmaintained upstream (see README.mozilla for details) |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | firefox | < 20.0+build1-0ubuntu0.10.04.3 | UNKNOWN |
| ubuntu | 11.10 | noarch | firefox | < 20.0+build1-0ubuntu0.11.10.3 | UNKNOWN |
| ubuntu | 12.04 | noarch | firefox | < 20.0+build1-0ubuntu0.12.04.3 | UNKNOWN |
| ubuntu | 12.10 | noarch | firefox | < 20.0+build1-0ubuntu0.12.10.3 | UNKNOWN |
| ubuntu | 13.04 | noarch | firefox | < 20.0+build1-0ubuntu1 | UNKNOWN |
| ubuntu | 13.10 | noarch | firefox | < 20.0+build1-0ubuntu1 | UNKNOWN |
| ubuntu | 10.04 | noarch | thunderbird | < 17.0.5+build1-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 11.10 | noarch | thunderbird | < 17.0.5+build1-0ubuntu0.11.10.1 | UNKNOWN |
| ubuntu | 12.04 | noarch | thunderbird | < 17.0.5+build1-0ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 12.10 | noarch | thunderbird | < 17.0.5+build1-0ubuntu0.12.10.1 | UNKNOWN |
References
Related
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.011 Low
EPSS
Percentile
84.6%