PT-2013-2621 · Mozilla+1 · Firefox+2

Published 2013-04-03 · Updated 2024-12-12 · CVE-2013-0794

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 20.0 SeaMonkey versions prior to 2.17

Description The issue allows remote attackers to conduct phishing attacks via a crafted web site by not preventing origin spoofing of tab-modal dialogs.

Recommendations For Mozilla Firefox versions prior to 20.0, update to version 20.0 or later. For SeaMonkey versions prior to 2.17, update to version 2.17 or later.

Fix

Related Identifiers

CVE-2013-0794

OPENSUSE-SU-2013_0630-1

OPENSUSE-SU-2013_0631-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

Affected Products

Firefox

Seamonkey

Suse

References · 2082

• http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10071-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-0794 · Security Note
• http://mozilla.org/security/announce/2013/mfsa2013-37.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html · Vendor Advisory
• https://suse.com/security/cve/CVE-2009-0354 · Note
• https://suse.com/security/cve/CVE-2024-3302 · Note
• https://suse.com/security/cve/CVE-2024-1551 · Note
• https://suse.com/security/cve/CVE-2012-1937 · Note
• https://suse.com/security/cve/CVE-2023-25731 · Note
• https://suse.com/security/cve/CVE-2009-1307 · Note