Lucene search
Ubuntu.comUB:CVE-2013-0797HistoryApr 03, 2013 - 12:00 a.m.
CVE-2013-0797
2013-04-0300:00:00
ubuntu.com
ubuntu.com
6
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
40.2%
Untrusted search path vulnerability in the Mozilla Updater in Mozilla
Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before
17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17
allows local users to gain privileges via a Trojan horse DLL file in an
unspecified directory.
Notes
| Author | Note |
|---|---|
| jdstrand | xulrunner-1.9.2 unmaintained upstream (see README.mozilla for details) |
| chrisccoulson | Only affects builds with Mozilla’s updater enabled |
Related
prion
prion
Design/Logic Flaw
2013-04-03 11:56:00
cvelist
cvelist
CVE-2013-0797
2013-04-03 10:00:00
mozilla
mozilla
Privilege escalation through Mozilla Updater — Mozilla
2013-04-02 00:00:00
nvd
nvd
CVE-2013-0797
2013-04-03 11:56:21
cve
cve
CVE-2013-0797
2013-04-03 11:56:21
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-34) - Linux
2021-11-11 00:00:00
Mozilla Thunderbird ESR Multiple Vulnerabilities -01 (Apr 2013) - Windows
2013-04-08 00:00:00
Mozilla Firefox ESR Multiple Vulnerabilities -01 (Apr 2013) - Mac OS X
2013-04-08 00:00:00
nessus
nessus
Firefox ESR 17.x < 17.0.5 Multiple Vulnerabilities
2013-04-04 00:00:00
Mozilla Thunderbird ESR 17.x < 17.0.5 Multiple Vulnerabilities
2013-04-04 00:00:00
SeaMonkey < 2.17 Multiple Vulnerabilities
2013-04-04 00:00:00
suse
suse
Security update for Mozilla Firefox (important)
2013-05-28 22:04:36
Security update for Mozilla Firefox (important)
2013-05-28 21:04:38
Security update for Mozilla Firefox (important)
2013-05-31 19:04:12
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-04-02 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-04-03 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-09-27 00:00:00
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
40.2%
Related for UB:CVE-2013-0797