CVE-2013-1697 The XrayWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly restrict use of Defau...
HighCVSS 9.3
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The XrayWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly restrict use of DefaultValue for method calls, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers use of a user-defined (1) toString or (2) valueOf method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 21.0 | No fix listed |
| mozilla Firefox | = 19.0 | No fix listed |
| mozilla Firefox | = 19.0.1 | No fix listed |
| mozilla Firefox | = 19.0.2 | No fix listed |
| mozilla Firefox | = 20.0 | No fix listed |
| mozilla Firefox | = 20.0.1 | No fix listed |
| mozilla Firefox | = 17.0 | No fix listed |
| mozilla Firefox | = 17.0.1 | No fix listed |
| mozilla Firefox | = 17.0.2 | No fix listed |
| mozilla Firefox | = 17.0.3 | No fix listed |
| mozilla Firefox | = 17.0.4 | No fix listed |
| mozilla Firefox | = 17.0.5 | No fix listed |
| mozilla Firefox | = 17.0.6 | No fix listed |
| mozilla Thunderbird | <= 17.0.6 | No fix listed |
| mozilla Thunderbird | = 17.0 | No fix listed |
| mozilla Thunderbird | = 17.0.1 | No fix listed |
| mozilla Thunderbird | = 17.0.2 | No fix listed |
| mozilla Thunderbird | = 17.0.3 | No fix listed |
| mozilla Thunderbird | = 17.0.4 | No fix listed |
| mozilla Thunderbird | = 17.0.5 | No fix listed |
| mozilla thunderbird esr | = 17.0 | No fix listed |
| mozilla thunderbird esr | = 17.0.1 | No fix listed |
| mozilla thunderbird esr | = 17.0.2 | No fix listed |
| mozilla thunderbird esr | = 17.0.3 | No fix listed |
| mozilla thunderbird esr | = 17.0.4 | No fix listed |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla thunderbird esr | = 17.0.5 | No fix listed |
| mozilla thunderbird esr | = 17.0.6 | No fix listed |
References
- openSUSE-SU-2013:1140 vendor-advisory
- openSUSE-SU-2013:1141 vendor-advisory
- openSUSE-SU-2013:1142 vendor-advisory
- openSUSE-SU-2013:1143 vendor-advisory
- SUSE-SU-2013:1152 vendor-advisory
- SUSE-SU-2013:1153 vendor-advisory
- RHSA-2013:0981 vendor-advisory
- RHSA-2013:0982 vendor-advisory
- DSA-2716 vendor-advisory
- DSA-2720 vendor-advisory
- www.mozilla.org vendor-advisory
- 60784 vdb-entry
- USN-1890-1 vendor-advisory
- USN-1891-1 vendor-advisory
- bugzilla.mozilla.org
- oval:org.mitre.oval:def:17243 signature vdb-entry