NVD

Id
37085  
Name
CVE-2013-0795  
Description
The System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 does not prevent use of the cloneNode method for cloning a protected node, which allows remote attackers to bypass the Same Origin Policy or possibly execute arbitrary JavaScript code with chrome privileges via a crafted web site.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-04-03  
Modified Date
2013-11-02  
Seq
2013-0795  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
189734 37085 CVE-2013-0795 openSUSE-SU-2013:0630  View
189735 37085 CVE-2013-0795 openSUSE-SU-2013:0631  View
189736 37085 CVE-2013-0795 SUSE-SU-2013:0645  View
189737 37085 CVE-2013-0795 SUSE-SU-2013:0850  View
189738 37085 CVE-2013-0795 openSUSE-SU-2013:0875  View
189739 37085 CVE-2013-0795 oval:org.mitre.oval:def:16842  View
189740 37085 CVE-2013-0795 RHSA-2013:0696  View
189741 37085 CVE-2013-0795 RHSA-2013:0697  View
189742 37085 CVE-2013-0795 DSA-2699  View
189743 37085 CVE-2013-0795 http://www.mozilla.org/security/announce/2013/mfsa2013-36.html  View
189744 37085 CVE-2013-0795 USN-1791-1  View
189745 37085 CVE-2013-0795 https://bugzilla.mozilla.org/show_bug.cgi?id=825697  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20556 JVNDB-2013-002131 複数の Mozilla 製品の SOW の実装における同一生成元ポリシーを回避される脆弱性 複数の Mozilla 製品の System Only Wrapper (SOW) の実装は、保護されたノードを複製するための cloneNode メソッドの使用を制限しないため、同一生成元ポリシーを回避される、またはクローム特権で任意の JavaScript コードを実行される脆弱性が存在します。 CVE-2013-0795 60737 CVE-2013-0795 37085 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002131.html 2013-04-02 2013-06-27 View