NVD

Id
37063  
Name
CVE-2013-0773  
Description
The Chrome Object Wrapper (COW) and System Only Wrapper (SOW) implementations in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent modifications to a prototype, which allows remote attackers to obtain sensitive information from chrome objects or possibly execute arbitrary JavaScript code with chrome privileges via a crafted web site.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-02-19  
Modified Date
2013-11-02  
Seq
2013-0773  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
189495 37063 CVE-2013-0773 openSUSE-SU-2013:0323  View
189496 37063 CVE-2013-0773 openSUSE-SU-2013:0324  View
189497 37063 CVE-2013-0773 oval:org.mitre.oval:def:16861  View
189498 37063 CVE-2013-0773 DSA-2699  View
189499 37063 CVE-2013-0773 http://www.mozilla.org/security/announce/2013/mfsa2013-24.html  View
189500 37063 CVE-2013-0773 USN-1729-1  View
189501 37063 CVE-2013-0773 USN-1729-2  View
189502 37063 CVE-2013-0773 USN-1748-1  View
189503 37063 CVE-2013-0773 https://bugzilla.mozilla.org/show_bug.cgi?id=809652  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20034 JVNDB-2013-001609 複数の Mozilla 製品の COW および SOW の実装における重要な情報を取得される脆弱性 複数の Mozilla 製品の Chrome Object Wrapper (COW) および System Only Wrapper (SOW) の実装は、プロトタイプへの変更を適切に制限しないため、クロームオブジェクトから重要な情報を取得される、またはクローム特権で任意の JavaScript コードを実行される脆弱性が存在します。 CVE-2013-0773 60715 CVE-2013-0773 37063 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001609.html 2013-02-19 2013-06-19 View