CVEvulnerability
CVE-2013-0797
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-04-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Description
Untrusted search path vulnerability in the Mozilla Updater in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 allows local users to gain privileges via a Trojan horse DLL file in an unspecified directory.
Affected configurations
• mozilla firefox (<= 19.0.2)
• mozilla firefox 19.0
• mozilla firefox 19.0.1
• mozilla firefox 17.0
• mozilla firefox 17.0.1
• mozilla firefox 17.0.2
• mozilla firefox 17.0.3
• mozilla firefox 17.0.4
• mozilla thunderbird 17.0
• mozilla thunderbird 17.0.1
• mozilla thunderbird 17.0.2
• mozilla thunderbird 17.0.3
• mozilla thunderbird 17.0.4
• mozilla thunderbird esr 17.0
• mozilla thunderbird esr 17.0.1
• mozilla thunderbird esr 17.0.2
• mozilla thunderbird esr 17.0.3
• mozilla thunderbird esr 17.0.4
• mozilla seamonkey (<= 2.17)
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla seamonkey 2.0.4
• mozilla seamonkey 2.0.5
• mozilla seamonkey 2.0.6
• mozilla seamonkey 2.0.7
• mozilla seamonkey 2.0.8
• mozilla seamonkey 2.0.9
• mozilla seamonkey 2.0.10
• mozilla seamonkey 2.0.11
• mozilla seamonkey 2.0.12
• mozilla seamonkey 2.0.13
• mozilla seamonkey 2.0.14
• mozilla seamonkey 2.1
• mozilla seamonkey 2.2
• mozilla seamonkey 2.3
• mozilla seamonkey 2.3.1
• mozilla seamonkey 2.3.2
• mozilla seamonkey 2.3.3
• mozilla seamonkey 2.4
• mozilla seamonkey 2.4.1
• mozilla seamonkey 2.5
• mozilla seamonkey 2.6
• mozilla seamonkey 2.6.1
• mozilla seamonkey 2.7
• mozilla seamonkey 2.7.1
• mozilla seamonkey 2.7.2
• mozilla seamonkey 2.8
• mozilla seamonkey 2.9
• mozilla seamonkey 2.9.1
• mozilla seamonkey 2.10
• mozilla seamonkey 2.10.1
• mozilla seamonkey 2.11
• mozilla seamonkey 2.12
• mozilla seamonkey 2.12.1
• mozilla seamonkey 2.13
• mozilla seamonkey 2.13.1
• mozilla seamonkey 2.13.2
• mozilla seamonkey 2.14
… and 7 more
References
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html lists.opensuse.org
- http://www.mozilla.org/security/announce/2013/mfsa2013-34.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=830134 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17146 oval.cisecurity.org
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html lists.opensuse.org
- http://www.mozilla.org/security/announce/2013/mfsa2013-34.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=830134 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17146 oval.cisecurity.org