CVE-2013-1711

The XrayWrapper implementation in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 does not properly address the possibility of an XBL scope bypass resulting from non-native arguments in XBL function calls, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks by leveraging access to an unprivileged object.

• mozilla seamonkey (<= 2.20) • mozilla seamonkey 2.0 • mozilla seamonkey 2.0.1 • mozilla seamonkey 2.0.2 • mozilla seamonkey 2.0.3 • mozilla seamonkey 2.0.4 • mozilla seamonkey 2.0.5 • mozilla seamonkey 2.0.6 • mozilla seamonkey 2.0.7 • mozilla seamonkey 2.0.8 • mozilla seamonkey 2.0.9 • mozilla seamonkey 2.0.10 • mozilla seamonkey 2.0.11 • mozilla seamonkey 2.0.12 • mozilla seamonkey 2.0.13 • mozilla seamonkey 2.0.14 • mozilla seamonkey 2.1 • mozilla seamonkey 2.2 • mozilla seamonkey 2.3 • mozilla seamonkey 2.3.1 • mozilla seamonkey 2.3.2 • mozilla seamonkey 2.3.3 • mozilla seamonkey 2.4 • mozilla seamonkey 2.4.1 • mozilla seamonkey 2.5 • mozilla seamonkey 2.6 • mozilla seamonkey 2.6.1 • mozilla seamonkey 2.7 • mozilla seamonkey 2.7.1 • mozilla seamonkey 2.7.2 • mozilla seamonkey 2.8 • mozilla seamonkey 2.9 • mozilla seamonkey 2.9.1 • mozilla seamonkey 2.10 • mozilla seamonkey 2.10.1 • mozilla seamonkey 2.11 • mozilla seamonkey 2.12 • mozilla seamonkey 2.12.1 • mozilla seamonkey 2.13 • mozilla seamonkey 2.13.1 • mozilla seamonkey 2.13.2 • mozilla seamonkey 2.14 • mozilla seamonkey 2.15 • mozilla seamonkey 2.15.1 • mozilla seamonkey 2.15.2 • mozilla seamonkey 2.16 • mozilla seamonkey 2.16.1 • mozilla seamonkey 2.16.2 • mozilla seamonkey 2.17 • mozilla seamonkey 2.17.1 • mozilla seamonkey 2.18 • mozilla seamonkey 2.19 • mozilla seamonkey 2.20 • mozilla firefox (<= 22.0) • mozilla firefox 19.0 • mozilla firefox 19.0.1 • mozilla firefox 19.0.2 • mozilla firefox 20.0 • mozilla firefox 20.0.1 • mozilla firefox 21.0