CVE-2013-0765 Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 do not prevent multiple wrapping of WebIDL objects, which allows remote attackers to bypass intended access restrictio...
HighCVSS 9.3
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 do not prevent multiple wrapping of WebIDL objects, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | < 19.0 | 19.0 |
| mozilla seamonkey | < 2.16 | 2.16 |
| opensuse | = 11.4 | No fix listed |
| opensuse | = 12.1 | No fix listed |
| opensuse | = 12.2 | No fix listed |
| Canonical Ubuntu Linux | = 10.04 | No fix listed |
| Canonical Ubuntu Linux | = 11.10 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 12.10 | No fix listed |
References
- openSUSE-SU-2013:0323 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2013:0324 mailing-list third-party-advisory vendor-advisory
- www.mozilla.org third-party-advisory vendor-advisory
- USN-1729-1 third-party-advisory vendor-advisory
- USN-1729-2 third-party-advisory vendor-advisory
- bugzilla.mozilla.org issue-tracking patch vendor-advisory
- oval:org.mitre.oval:def:17097 signature third-party-advisory vdb-entry