Vulnerability Description
Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 do not prevent multiple wrapping of WebIDL objects, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | < 19.0 |
| Mozilla | Seamonkey | < 2.16 |
| Opensuse | Opensuse | 11.4 |
| Canonical | Ubuntu Linux | 10.04 |
References
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.htmlMailing ListThird Party Advisory
- http://www.mozilla.org/security/announce/2013/mfsa2013-23.htmlThird Party AdvisoryVendor Advisory
- http://www.ubuntu.com/usn/USN-1729-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-1729-2Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=830614Issue TrackingPatchVendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.htmlMailing ListThird Party Advisory
- http://www.mozilla.org/security/announce/2013/mfsa2013-23.htmlThird Party AdvisoryVendor Advisory
- http://www.ubuntu.com/usn/USN-1729-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-1729-2Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=830614Issue TrackingPatchVendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Third Party Advisory
FAQ
What is CVE-2013-0765?
CVE-2013-0765 is a vulnerability with a CVSS score of 9.3 (HIGH). Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 do not prevent multiple wrapping of WebIDL objects, which allows remote attackers to bypass intended access restrictio...
How severe is CVE-2013-0765?
CVE-2013-0765 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-0765?
Check the references section above for vendor advisories and patch information. Affected products include: Mozilla Firefox, Mozilla Seamonkey, Opensuse Opensuse, Canonical Ubuntu Linux.