CVE-2013-0773
N/A
N/A
Summary
The Chrome Object Wrapper (COW) and System Only Wrapper (SOW) implementations in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent modifications to a prototype, which allows remote attackers to obtain sensitive information from chrome objects or possibly execute arbitrary JavaScript code with chrome privileges via a crafted web site.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.debian.org/security/2013/dsa-2699
- http://www.ubuntu.com/usn/USN-1729-1
- http://www.ubuntu.com/usn/USN-1729-2
- http://www.ubuntu.com/usn/USN-1748-1
- http://www.mozilla.org/security/announce/2013/mfsa2013-24.html
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16861
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=809652
References
- http://www.debian.org/security/2013/dsa-2699
- http://www.ubuntu.com/usn/USN-1729-1
- http://www.ubuntu.com/usn/USN-1729-2
- http://www.ubuntu.com/usn/USN-1748-1
- http://www.mozilla.org/security/announce/2013/mfsa2013-24.html
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16861
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=809652
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.