PT-2013-3338 · Mozilla+1 · Firefox+5
Seb Patane
·
Published
2013-08-07
·
Updated
2024-10-21
·
CVE-2013-1706
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 23.0
Firefox ESR versions 17.x prior to 17.0.8
Thunderbird versions prior to 17.0.8
Thunderbird ESR versions 17.x prior to 17.0.8
Description
A stack-based buffer overflow issue exists in the Mozilla Maintenance Service, specifically in maintenanceservice.exe. This issue allows local users to gain privileges via a long pathname on the command line.
Recommendations
For Mozilla Firefox versions prior to 23.0, update to version 23.0 or later.
For Firefox ESR versions 17.x prior to 17.0.8, update to version 17.0.8 or later.
For Thunderbird versions prior to 17.0.8, update to version 17.0.8 or later.
For Thunderbird ESR versions 17.x prior to 17.0.8, update to version 17.0.8 or later.
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Firefox Esr
Firefox
Maintenance Service
Suse
Thunderbird
Thunderbird Esr