CVE

Id
61673  
CVE No.
CVE-2013-1726  
Status
Candidate  
Description
Mozilla Updater in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 does not ensure exclusive access to a MAR file, which allows local users to gain privileges by creating a Trojan horse file after MAR signature verification but before MAR use.  
Phase
Assigned (20130213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
617439 61673 CVE-2013-1726 CONFIRM:http://www.mozilla.org/security/announce/2013/mfsa2013-83.html  View
617440 61673 CVE-2013-1726 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=890853  View
617441 61673 CVE-2013-1726 FEDORA:FEDORA-2013-16992  View
617442 61673 CVE-2013-1726 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html  View
617443 61673 CVE-2013-1726 FEDORA:FEDORA-2013-17047  View
617444 61673 CVE-2013-1726 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html  View
617445 61673 CVE-2013-1726 FEDORA:FEDORA-2013-17074  View
617446 61673 CVE-2013-1726 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html  View
617447 61673 CVE-2013-1726 OVAL:oval:org.mitre.oval:def:18821  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22630 JVNDB-2013-004205 Android 上で稼働する Mozilla Firefox の GL トレーシング機能における任意のコードを実行される脆弱性 Android 上で稼働する Mozilla Firefox の GL トレーシング機能には、検索パスに関する処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2013-1731 61673 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004205.html  View