Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2013-6671

Опубликовано: 11 дек. 2013
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 10
CVSS3: 9.8

Описание

The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code via crafted use of JavaScript code for ordered list elements.

РелизСтатусПримечание
devel

not-affected

lucid

ignored

end of life
precise

released

26.0+build2-0ubuntu0.12.04.2
quantal

released

26.0+build2-0ubuntu0.12.10.2
raring

released

26.0+build2-0ubuntu0.13.04.2
saucy

released

26.0+build2-0ubuntu0.13.10.2
upstream

released

26.0

Показывать по

РелизСтатусПримечание
devel

released

1:24.2.0+build1-0ubuntu1
lucid

ignored

end of life
precise

released

1:24.2.0+build1-0ubuntu0.12.04.1
quantal

released

1:24.2.0+build1-0ubuntu0.12.10.1
raring

released

1:24.2.0+build1-0ubuntu0.13.04.1
saucy

released

1:24.2.0+build1-0ubuntu0.13.10.1
upstream

released

24.2.0

Показывать по

EPSS

Процентиль: 90%
0.05716
Низкий

10 Critical

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

redhat
больше 11 лет назад

The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code via crafted use of JavaScript code for ordered list elements.

CVSS3: 9.8
nvd
больше 11 лет назад

The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code via crafted use of JavaScript code for ordered list elements.

CVSS3: 9.8
debian
больше 11 лет назад

The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26 ...

CVSS3: 9.8
github
около 3 лет назад

The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code via crafted use of JavaScript code for ordered list elements.

oracle-oval
больше 11 лет назад

ELSA-2013-1823: thunderbird security update (IMPORTANT)

EPSS

Процентиль: 90%
0.05716
Низкий

10 Critical

CVSS2

9.8 Critical

CVSS3