PT-2013-3339 · Mozilla+1 · Thunderbird Esr+4

Seb Patane

·

Published

2013-08-07

·

Updated

2024-10-21

·

CVE-2013-1707

CVSS v2.0

7.2

High

VectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 23.0 Firefox ESR versions prior to 17.0.8 Thunderbird versions prior to 17.0.8 Thunderbird ESR versions prior to 17.0.8
Description A stack-based buffer overflow issue exists in the Mozilla Updater component of Mozilla Firefox, allowing local users to gain privileges via a long pathname on the command line to the Mozilla Maintenance Service.
Recommendations For Mozilla Firefox versions prior to 23.0, update to version 23.0 or later. For Firefox ESR versions prior to 17.0.8, update to version 17.0.8 or later. For Thunderbird versions prior to 17.0.8, update to version 17.0.8 or later. For Thunderbird ESR versions prior to 17.0.8, update to version 17.0.8 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-1707
MGASA-2013-0329

Affected Products

Firefox Esr
Firefox
Suse
Thunderbird
Thunderbird Esr