CVE-2013-0765

Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 do not prevent multiple wrapping of WebIDL objects, which allows remote attackers to bypass intended access restrictions via unspecified vectors.

Score

CVSS 2.0 9.3 Critical

Status

Modified - security@mozilla.org

Published

2013-02-19

Last modified

2024-08-06

Affected products

• Ubuntu Linux (Canonical)
• Firefox (Mozilla)
• Seamonkey (Mozilla)
• Opensuse (Opensuse)

References

• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html
• http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html
• http://www.mozilla.org/security/announce/2013/mfsa2013-23.html
• http://www.ubuntu.com/usn/USN-1729-1
• http://www.ubuntu.com/usn/USN-1729-2
• https://bugzilla.mozilla.org/show_bug.cgi?id=830614
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17097