Логотип exploitDog
bind:CVE-2013-1670
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2013-1670

Количество 7

Количество 7

ubuntu логотип

CVE-2013-1670

почти 13 лет назад

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.

CVSS2: 4.3
EPSS: Средний
redhat логотип

CVE-2013-1670

почти 13 лет назад

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.

CVSS2: 4.3
EPSS: Средний
nvd логотип

CVE-2013-1670

почти 13 лет назад

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.

CVSS2: 4.3
EPSS: Средний
debian логотип

CVE-2013-1670

почти 13 лет назад

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox befo ...

CVSS2: 4.3
EPSS: Средний
github логотип

GHSA-wmq6-5fp5-6pfg

почти 4 года назад

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.

EPSS: Средний
oracle-oval логотип

ELSA-2013-0821

почти 13 лет назад

ELSA-2013-0821: thunderbird security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2013-0820

почти 13 лет назад

ELSA-2013-0820: firefox security update (CRITICAL)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2013-1670

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.

CVSS2: 4.3
25%
Средний
почти 13 лет назад
redhat логотип
CVE-2013-1670

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.

CVSS2: 4.3
25%
Средний
почти 13 лет назад
nvd логотип
CVE-2013-1670

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.

CVSS2: 4.3
25%
Средний
почти 13 лет назад
debian логотип
CVE-2013-1670

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox befo ...

CVSS2: 4.3
25%
Средний
почти 13 лет назад
github логотип
GHSA-wmq6-5fp5-6pfg

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.

25%
Средний
почти 4 года назад
oracle-oval логотип
ELSA-2013-0821

ELSA-2013-0821: thunderbird security update (IMPORTANT)

почти 13 лет назад
oracle-oval логотип
ELSA-2013-0820

ELSA-2013-0820: firefox security update (CRITICAL)

почти 13 лет назад

Уязвимостей на страницу