9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.012 Low
EPSS
Percentile
85.5%
The XrayWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR
17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x
before 17.0.7 does not properly restrict use of DefaultValue for method
calls, which allows remote attackers to execute arbitrary JavaScript code
with chrome privileges via a crafted web site that triggers use of a
user-defined (1) toString or (2) valueOf method.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 12.04 | noarch | firefox | < 22.0+build1-0ubuntu0.12.04.1 | UNKNOWN |
ubuntu | 12.10 | noarch | firefox | < 22.0+build1-0ubuntu0.12.10.1 | UNKNOWN |
ubuntu | 13.04 | noarch | firefox | < 22.0+build1-0ubuntu0.13.04.1 | UNKNOWN |
ubuntu | 12.04 | noarch | thunderbird | < 17.0.7+build1-0ubuntu0.12.04.1 | UNKNOWN |
ubuntu | 12.10 | noarch | thunderbird | < 17.0.7+build1-0ubuntu0.12.10.1 | UNKNOWN |
ubuntu | 13.04 | noarch | thunderbird | < 17.0.7+build1-0ubuntu0.13.04.1 | UNKNOWN |