CVE-2013-1713

2013-08-0600:00:00

ubuntu.com

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.2%

JSON

Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird
before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before
2.20 use an incorrect URI within unspecified comparisons during enforcement
of the Same Origin Policy, which allows remote attackers to conduct
cross-site scripting (XSS) attacks or install arbitrary add-ons via a
crafted web site.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchfirefox< 23.0+build2-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchfirefox< 23.0+build2-0ubuntu0.12.10.1UNKNOWN
ubuntu13.04noarchfirefox< 23.0+build2-0ubuntu0.13.04.1UNKNOWN
ubuntu12.04noarchthunderbird< 17.0.8+build1-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchthunderbird< 17.0.8+build1-0ubuntu0.12.10.1UNKNOWN
ubuntu13.04noarchthunderbird< 17.0.8+build1-0ubuntu0.13.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	firefox	< 23.0+build2-0ubuntu0.12.04.1	UNKNOWN
ubuntu	12.10	noarch	firefox	< 23.0+build2-0ubuntu0.12.10.1	UNKNOWN
ubuntu	13.04	noarch	firefox	< 23.0+build2-0ubuntu0.13.04.1	UNKNOWN
ubuntu	12.04	noarch	thunderbird	< 17.0.8+build1-0ubuntu0.12.04.1	UNKNOWN
ubuntu	12.10	noarch	thunderbird	< 17.0.8+build1-0ubuntu0.12.10.1	UNKNOWN
ubuntu	13.04	noarch	thunderbird	< 17.0.8+build1-0ubuntu0.13.04.1	UNKNOWN