Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-0798
HistoryApr 03, 2013 - 12:00 a.m.

CVE-2013-0798

2013-04-0300:00:00
ubuntu.com
ubuntu.com
10

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

49.0%

Mozilla Firefox before 20.0 on Android uses world-writable and
world-readable permissions for the app_tmp installation directory in the
local filesystem, which allows attackers to modify add-ons before
installation via an application that leverages the time window during which
app_tmp is used.

Notes

Author Note
chrisccoulson Affects Firefox for Android only

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

49.0%