CVE-2013-0795 The System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 do...
HighCVSS 10.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 does not prevent use of the cloneNode method for cloning a protected node, which allows remote attackers to bypass the Same Origin Policy or possibly execute arbitrary JavaScript code with chrome privileges via a crafted web site.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 19.0.2 | No fix listed |
| mozilla Firefox | = 19.0 | No fix listed |
| mozilla Firefox | = 19.0.1 | No fix listed |
| mozilla Firefox | = 17.0 | No fix listed |
| mozilla Firefox | = 17.0.1 | No fix listed |
| mozilla Firefox | = 17.0.2 | No fix listed |
| mozilla Firefox | = 17.0.3 | No fix listed |
| mozilla Firefox | = 17.0.4 | No fix listed |
| mozilla Thunderbird | = 17.0 | No fix listed |
| mozilla Thunderbird | = 17.0.1 | No fix listed |
| mozilla Thunderbird | = 17.0.2 | No fix listed |
| mozilla Thunderbird | = 17.0.3 | No fix listed |
| mozilla Thunderbird | = 17.0.4 | No fix listed |
| mozilla thunderbird esr | = 17.0 | No fix listed |
| mozilla thunderbird esr | = 17.0.1 | No fix listed |
| mozilla thunderbird esr | = 17.0.2 | No fix listed |
| mozilla thunderbird esr | = 17.0.3 | No fix listed |
| mozilla thunderbird esr | = 17.0.4 | No fix listed |
| mozilla seamonkey | <= 2.17 | No fix listed |
| mozilla seamonkey | = 2.0 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_1 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_2 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_3 | No fix listed |
| mozilla seamonkey | = 2.0-beta_1 | No fix listed |
| mozilla seamonkey | = 2.0-beta_2 | No fix listed |
Show 128 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla seamonkey | = 2.0-rc1 | No fix listed |
| mozilla seamonkey | = 2.0-rc2 | No fix listed |
| mozilla seamonkey | = 2.0.1 | No fix listed |
| mozilla seamonkey | = 2.0.2 | No fix listed |
| mozilla seamonkey | = 2.0.3 | No fix listed |
| mozilla seamonkey | = 2.0.4 | No fix listed |
| mozilla seamonkey | = 2.0.5 | No fix listed |
| mozilla seamonkey | = 2.0.6 | No fix listed |
| mozilla seamonkey | = 2.0.7 | No fix listed |
| mozilla seamonkey | = 2.0.8 | No fix listed |
| mozilla seamonkey | = 2.0.9 | No fix listed |
| mozilla seamonkey | = 2.0.10 | No fix listed |
| mozilla seamonkey | = 2.0.11 | No fix listed |
| mozilla seamonkey | = 2.0.12 | No fix listed |
| mozilla seamonkey | = 2.0.13 | No fix listed |
| mozilla seamonkey | = 2.0.14 | No fix listed |
| mozilla seamonkey | = 2.1 | No fix listed |
| mozilla seamonkey | = 2.1-alpha1 | No fix listed |
| mozilla seamonkey | = 2.1-alpha2 | No fix listed |
| mozilla seamonkey | = 2.1-alpha3 | No fix listed |
| mozilla seamonkey | = 2.1-beta1 | No fix listed |
| mozilla seamonkey | = 2.1-beta2 | No fix listed |
| mozilla seamonkey | = 2.1-beta3 | No fix listed |
| mozilla seamonkey | = 2.1-rc1 | No fix listed |
| mozilla seamonkey | = 2.1-rc2 | No fix listed |
| mozilla seamonkey | = 2.2 | No fix listed |
| mozilla seamonkey | = 2.2-beta1 | No fix listed |
| mozilla seamonkey | = 2.2-beta2 | No fix listed |
| mozilla seamonkey | = 2.2-beta3 | No fix listed |
| mozilla seamonkey | = 2.3 | No fix listed |
| mozilla seamonkey | = 2.3-beta1 | No fix listed |
| mozilla seamonkey | = 2.3-beta2 | No fix listed |
| mozilla seamonkey | = 2.3-beta3 | No fix listed |
| mozilla seamonkey | = 2.3.1 | No fix listed |
| mozilla seamonkey | = 2.3.2 | No fix listed |
| mozilla seamonkey | = 2.3.3 | No fix listed |
| mozilla seamonkey | = 2.4 | No fix listed |
| mozilla seamonkey | = 2.4-beta1 | No fix listed |
| mozilla seamonkey | = 2.4-beta2 | No fix listed |
| mozilla seamonkey | = 2.4-beta3 | No fix listed |
| mozilla seamonkey | = 2.4.1 | No fix listed |
| mozilla seamonkey | = 2.5 | No fix listed |
| mozilla seamonkey | = 2.5-beta1 | No fix listed |
| mozilla seamonkey | = 2.5-beta2 | No fix listed |
| mozilla seamonkey | = 2.5-beta3 | No fix listed |
| mozilla seamonkey | = 2.5-beta4 | No fix listed |
| mozilla seamonkey | = 2.6 | No fix listed |
| mozilla seamonkey | = 2.6-beta1 | No fix listed |
| mozilla seamonkey | = 2.6-beta2 | No fix listed |
| mozilla seamonkey | = 2.6-beta3 | No fix listed |
| mozilla seamonkey | = 2.6-beta4 | No fix listed |
| mozilla seamonkey | = 2.6.1 | No fix listed |
| mozilla seamonkey | = 2.7 | No fix listed |
| mozilla seamonkey | = 2.7-beta1 | No fix listed |
| mozilla seamonkey | = 2.7-beta2 | No fix listed |
| mozilla seamonkey | = 2.7-beta3 | No fix listed |
| mozilla seamonkey | = 2.7-beta4 | No fix listed |
| mozilla seamonkey | = 2.7-beta5 | No fix listed |
| mozilla seamonkey | = 2.7.1 | No fix listed |
| mozilla seamonkey | = 2.7.2 | No fix listed |
| mozilla seamonkey | = 2.8 | No fix listed |
| mozilla seamonkey | = 2.8-beta1 | No fix listed |
| mozilla seamonkey | = 2.8-beta2 | No fix listed |
| mozilla seamonkey | = 2.8-beta3 | No fix listed |
| mozilla seamonkey | = 2.8-beta4 | No fix listed |
| mozilla seamonkey | = 2.8-beta5 | No fix listed |
| mozilla seamonkey | = 2.8-beta6 | No fix listed |
| mozilla seamonkey | = 2.9 | No fix listed |
| mozilla seamonkey | = 2.9-beta1 | No fix listed |
| mozilla seamonkey | = 2.9-beta2 | No fix listed |
| mozilla seamonkey | = 2.9-beta3 | No fix listed |
| mozilla seamonkey | = 2.9-beta4 | No fix listed |
| mozilla seamonkey | = 2.9.1 | No fix listed |
| mozilla seamonkey | = 2.10 | No fix listed |
| mozilla seamonkey | = 2.10-beta1 | No fix listed |
| mozilla seamonkey | = 2.10-beta2 | No fix listed |
| mozilla seamonkey | = 2.10-beta3 | No fix listed |
| mozilla seamonkey | = 2.10.1 | No fix listed |
| mozilla seamonkey | = 2.11 | No fix listed |
| mozilla seamonkey | = 2.11-beta1 | No fix listed |
| mozilla seamonkey | = 2.11-beta2 | No fix listed |
| mozilla seamonkey | = 2.11-beta3 | No fix listed |
| mozilla seamonkey | = 2.11-beta4 | No fix listed |
| mozilla seamonkey | = 2.11-beta5 | No fix listed |
| mozilla seamonkey | = 2.11-beta6 | No fix listed |
| mozilla seamonkey | = 2.12 | No fix listed |
| mozilla seamonkey | = 2.12-beta1 | No fix listed |
| mozilla seamonkey | = 2.12-beta2 | No fix listed |
| mozilla seamonkey | = 2.12-beta3 | No fix listed |
| mozilla seamonkey | = 2.12-beta4 | No fix listed |
| mozilla seamonkey | = 2.12-beta5 | No fix listed |
| mozilla seamonkey | = 2.12-beta6 | No fix listed |
| mozilla seamonkey | = 2.12.1 | No fix listed |
| mozilla seamonkey | = 2.13 | No fix listed |
| mozilla seamonkey | = 2.13-beta1 | No fix listed |
| mozilla seamonkey | = 2.13-beta2 | No fix listed |
| mozilla seamonkey | = 2.13-beta3 | No fix listed |
| mozilla seamonkey | = 2.13-beta4 | No fix listed |
| mozilla seamonkey | = 2.13-beta5 | No fix listed |
| mozilla seamonkey | = 2.13-beta6 | No fix listed |
| mozilla seamonkey | = 2.13.1 | No fix listed |
| mozilla seamonkey | = 2.13.2 | No fix listed |
| mozilla seamonkey | = 2.14 | No fix listed |
| mozilla seamonkey | = 2.14-beta1 | No fix listed |
| mozilla seamonkey | = 2.14-beta2 | No fix listed |
| mozilla seamonkey | = 2.14-beta3 | No fix listed |
| mozilla seamonkey | = 2.14-beta4 | No fix listed |
| mozilla seamonkey | = 2.14-beta5 | No fix listed |
| mozilla seamonkey | = 2.15 | No fix listed |
| mozilla seamonkey | = 2.15-beta1 | No fix listed |
| mozilla seamonkey | = 2.15-beta2 | No fix listed |
| mozilla seamonkey | = 2.15-beta3 | No fix listed |
| mozilla seamonkey | = 2.15-beta4 | No fix listed |
| mozilla seamonkey | = 2.15-beta5 | No fix listed |
| mozilla seamonkey | = 2.15-beta6 | No fix listed |
| mozilla seamonkey | = 2.15.1 | No fix listed |
| mozilla seamonkey | = 2.15.2 | No fix listed |
| mozilla seamonkey | = 2.16 | No fix listed |
| mozilla seamonkey | = 2.16-beta1 | No fix listed |
| mozilla seamonkey | = 2.16-beta2 | No fix listed |
| mozilla seamonkey | = 2.16-beta3 | No fix listed |
| mozilla seamonkey | = 2.16-beta4 | No fix listed |
| mozilla seamonkey | = 2.16-beta5 | No fix listed |
| mozilla seamonkey | = 2.16.1 | No fix listed |
| mozilla seamonkey | = 2.16.2 | No fix listed |
| mozilla seamonkey | = 2.17-beta1 | No fix listed |
| mozilla seamonkey | = 2.17-beta2 | No fix listed |
| mozilla seamonkey | = 2.17-beta3 | No fix listed |
References
- openSUSE-SU-2013:0630 vendor-advisory
- openSUSE-SU-2013:0631 vendor-advisory
- SUSE-SU-2013:0645 vendor-advisory
- SUSE-SU-2013:0850 vendor-advisory
- openSUSE-SU-2013:0875 vendor-advisory
- RHSA-2013:0696 vendor-advisory
- RHSA-2013:0697 vendor-advisory
- DSA-2699 vendor-advisory
- www.mozilla.org vendor-advisory
- USN-1791-1 vendor-advisory
- bugzilla.mozilla.org
- oval:org.mitre.oval:def:16842 signature vdb-entry