Логотип exploitDog
bind:CVE-2013-1670
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2013-1670

Количество 7

Количество 7

ubuntu логотип

CVE-2013-1670

больше 12 лет назад

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.

CVSS2: 4.3
EPSS: Средний
redhat логотип

CVE-2013-1670

больше 12 лет назад

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.

CVSS2: 4.3
EPSS: Средний
nvd логотип

CVE-2013-1670

больше 12 лет назад

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.

CVSS2: 4.3
EPSS: Средний
debian логотип

CVE-2013-1670

больше 12 лет назад

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox befo ...

CVSS2: 4.3
EPSS: Средний
github логотип

GHSA-wmq6-5fp5-6pfg

больше 3 лет назад

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.

EPSS: Средний
oracle-oval логотип

ELSA-2013-0821

больше 12 лет назад

ELSA-2013-0821: thunderbird security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2013-0820

больше 12 лет назад

ELSA-2013-0820: firefox security update (CRITICAL)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2013-1670

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.

CVSS2: 4.3
46%
Средний
больше 12 лет назад
redhat логотип
CVE-2013-1670

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.

CVSS2: 4.3
46%
Средний
больше 12 лет назад
nvd логотип
CVE-2013-1670

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.

CVSS2: 4.3
46%
Средний
больше 12 лет назад
debian логотип
CVE-2013-1670

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox befo ...

CVSS2: 4.3
46%
Средний
больше 12 лет назад
github логотип
GHSA-wmq6-5fp5-6pfg

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.

46%
Средний
больше 3 лет назад
oracle-oval логотип
ELSA-2013-0821

ELSA-2013-0821: thunderbird security update (IMPORTANT)

больше 12 лет назад
oracle-oval логотип
ELSA-2013-0820

ELSA-2013-0820: firefox security update (CRITICAL)

больше 12 лет назад

Уязвимостей на страницу