PT-2013-3339 · Mozilla+1 · Thunderbird Esr+4

Seb Patane

·

Publicado

2013-08-07

·

Atualizado

2024-10-21

·

CVE-2013-1707

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 23.0 Firefox ESR versions prior to 17.0.8 Thunderbird versions prior to 17.0.8 Thunderbird ESR versions prior to 17.0.8
Description A stack-based buffer overflow issue exists in the Mozilla Updater component of Mozilla Firefox, allowing local users to gain privileges via a long pathname on the command line to the Mozilla Maintenance Service.
Recommendations For Mozilla Firefox versions prior to 23.0, update to version 23.0 or later. For Firefox ESR versions prior to 17.0.8, update to version 17.0.8 or later. For Thunderbird versions prior to 17.0.8, update to version 17.0.8 or later. For Thunderbird ESR versions prior to 17.0.8, update to version 17.0.8 or later.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-1707
MGASA-2013-0329

Produtos afetados

Firefox Esr
Firefox
Suse
Thunderbird
Thunderbird Esr