NVD

Id
37899  
Name
CVE-2013-1737  
Description
Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly identify the "this" object during use of user-defined getter methods on DOM proxies, which might allow remote attackers to bypass intended access restrictions via vectors involving an expando object.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-09-18  
Modified Date
2017-01-06  
Seq
2013-1737  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
193341 37899 CVE-2013-1737 FEDORA-2013-16992  View
193342 37899 CVE-2013-1737 FEDORA-2013-17074  View
193343 37899 CVE-2013-1737 FEDORA-2013-17047  View
193344 37899 CVE-2013-1737 openSUSE-SU-2013:1633  View
193345 37899 CVE-2013-1737 openSUSE-SU-2013:1491  View
193346 37899 CVE-2013-1737 openSUSE-SU-2013:1493  View
193347 37899 CVE-2013-1737 openSUSE-SU-2013:1495  View
193348 37899 CVE-2013-1737 openSUSE-SU-2013:1496  View
193349 37899 CVE-2013-1737 openSUSE-SU-2013:1499  View
193350 37899 CVE-2013-1737 oval:org.mitre.oval:def:18789  View
193351 37899 CVE-2013-1737 RHSA-2013:1268  View
193352 37899 CVE-2013-1737 RHSA-2013:1269  View
193353 37899 CVE-2013-1737 DSA-2762  View
193354 37899 CVE-2013-1737 http://www.mozilla.org/security/announce/2013/mfsa2013-91.html  View
193355 37899 CVE-2013-1737 62475  View
193356 37899 CVE-2013-1737 USN-1951-1  View
193357 37899 CVE-2013-1737 USN-1952-1  View
193358 37899 CVE-2013-1737 https://bugzilla.mozilla.org/show_bug.cgi?id=907727  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22634 JVNDB-2013-004209 複数の Mozilla 製品におけるアクセス制限を回避される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey は、DOM プロキシ上のユーザ定義ゲッターメソッドの使用中に "this" オブジェクトを適切に識別しないため、アクセス制限を回避される脆弱性が存在します。 CVE-2013-1737 61679 CVE-2013-1737 37899 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004209.html 2013-09-17 2013-10-29 View