CVE-2013-1670
Published May 16, 2013
Last updated 25 days ago
Overview
- Description
- The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.
- Source
- security@mozilla.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-264
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B1246AD3-6704-42B1-89AE-E9DD64D3D7D7",
"versionEndIncluding": "20.0.1"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:19.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06FF9DFE-491D-4260-8A49-07FD342B9412"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:19.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE09D089-7F48-466B-B03A-C64152A12615"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:19.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "653D73DA-21C0-4C3F-9269-5A6D5C5B1E34"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:20.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "804A0ACE-EB28-413D-93F4-E849FEA01390"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mozilla:firefox:17.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3283FBAC-B77A-4C62-9D51-70BB35FA3D13"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:17.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "886D8A1F-ECDD-4FE9-A4E5-2322EEC0B880"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:17.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E10B8803-C319-4AAA-81CF-FA206A33BA55"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:17.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2B5567C-8969-456D-B6DF-3562B99C41FE"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:17.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5657779C-19F9-42B8-BBBD-292B898E8FD2"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:17.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEA3B9F4-BD8E-488B-A362-0B86BC6DA275"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0EA961C7-D2E2-4709-853D-77A17DFCFC7C",
"versionEndIncluding": "17.0.5"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird:17.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2FD78A8-0D3A-412C-8776-20C598697564"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird:17.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "777D8DC5-8D43-4842-B0A7-3C933F41F6E8"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird:17.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "808C66D2-4C53-4544-AD21-443D9A400B84"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird:17.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FB95E8B-CF01-471F-8306-BB9FB0896904"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird:17.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF7E092E-BCBE-48B4-8F6A-D3E4A0369AE1"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "341D94CE-C0EB-47FA-A043-E7B0F4344BBB"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84C3EE07-F201-451A-89A1-A41B8B2165E6"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "45837B42-7D29-4475-94F1-E29CD5831C7F"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7028A433-7D1B-4C6F-A0F6-1B69682F7853"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86C07513-8F98-4FA6-837D-7D735AE5EA91"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1D87C70-0EC2-49DE-A59D-CAF22760BC9D"
}
],
"operator": "OR"
}
]
}
]