CVE-2013-0798

Published Apr 3, 2013

Last updated 11 years ago

Overview

Description: Mozilla Firefox before 20.0 on Android uses world-writable and world-readable permissions for the app_tmp installation directory in the local filesystem, which allows attackers to modify add-ons before installation via an application that leverages the time window during which app_tmp is used.
Source: security@mozilla.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 4.3
Impact score: 2.9
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov: CWE-264

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D59284EC-92C2-467A-866B-DC315B4A4450",
            "versionEndIncluding": "19.0.2"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:firefox:19.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "06FF9DFE-491D-4260-8A49-07FD342B9412"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:firefox:19.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DE09D089-7F48-466B-B03A-C64152A12615"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "8255F035-04C8-4158-B301-82101711939C"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References