Vulnerability Description
Buffer overflow in the Mozilla Maintenance Service in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, and Thunderbird ESR 17.x before 17.0.5 on Windows allows local users to gain privileges via crafted arguments.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | <= 19.0.2 |
| Microsoft | Windows | All versions |
| Mozilla | Thunderbird | 17.0 |
| Mozilla | Thunderbird Esr | 17.0 |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html
- http://www.mozilla.org/security/announce/2013/mfsa2013-32.htmlVendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=848417
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html
- http://www.mozilla.org/security/announce/2013/mfsa2013-32.htmlVendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=848417
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
FAQ
What is CVE-2013-0799?
CVE-2013-0799 is a vulnerability with a CVSS score of 7.2 (HIGH). Buffer overflow in the Mozilla Maintenance Service in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, and Thunderbird ESR 17.x before 17.0.5 on Windows allows l...
How severe is CVE-2013-0799?
CVE-2013-0799 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-0799?
Check the references section above for vendor advisories and patch information. Affected products include: Mozilla Firefox, Microsoft Windows, Mozilla Thunderbird, Mozilla Thunderbird Esr.