CVEvulnerability
CVE-2013-0799
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-04-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the Mozilla Maintenance Service in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, and Thunderbird ESR 17.x before 17.0.5 on Windows allows local users to gain privileges via crafted arguments.
Affected configurations
• mozilla firefox (<= 19.0.2)
• mozilla firefox 19.0
• mozilla firefox 19.0.1
• mozilla firefox 17.0
• mozilla firefox 17.0.1
• mozilla firefox 17.0.2
• mozilla firefox 17.0.3
• mozilla firefox 17.0.4
• mozilla thunderbird 17.0
• mozilla thunderbird 17.0.1
• mozilla thunderbird 17.0.2
• mozilla thunderbird 17.0.3
• mozilla thunderbird 17.0.4
• mozilla thunderbird esr 17.0
• mozilla thunderbird esr 17.0.1
• mozilla thunderbird esr 17.0.2
• mozilla thunderbird esr 17.0.3
• mozilla thunderbird esr 17.0.4
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html lists.opensuse.org
- http://www.mozilla.org/security/announce/2013/mfsa2013-32.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=848417 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17155 oval.cisecurity.org
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html lists.opensuse.org
- http://www.mozilla.org/security/announce/2013/mfsa2013-32.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=848417 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17155 oval.cisecurity.org