PT-2013-3338 · Mozilla+1 · Firefox+5

Seb Patane

·

Publicado

2013-08-07

·

Atualizado

2024-10-21

·

CVE-2013-1706

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 23.0 Firefox ESR versions 17.x prior to 17.0.8 Thunderbird versions prior to 17.0.8 Thunderbird ESR versions 17.x prior to 17.0.8
Description A stack-based buffer overflow issue exists in the Mozilla Maintenance Service, specifically in maintenanceservice.exe. This issue allows local users to gain privileges via a long pathname on the command line.
Recommendations For Mozilla Firefox versions prior to 23.0, update to version 23.0 or later. For Firefox ESR versions 17.x prior to 17.0.8, update to version 17.0.8 or later. For Thunderbird versions prior to 17.0.8, update to version 17.0.8 or later. For Thunderbird ESR versions 17.x prior to 17.0.8, update to version 17.0.8 or later.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-1706
MGASA-2013-0329

Produtos afetados

Firefox Esr
Firefox
Maintenance Service
Suse
Thunderbird
Thunderbird Esr