Lucene search
Mozilla FoundationMFSA2013-23HistoryFeb 19, 2013 - 12:00 a.m.
Wrapped WebIDL objects can be wrapped again — Mozilla
2013-02-1900:00:00
Mozilla Foundation
www.mozilla.org
27
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.01
Percentile
83.8%
Mozilla developer Boris Zbarsky reported that in some circumstances a wrapped WebIDL object can be wrapped multiple times, overwriting the existing wrapped state. This could lead to an exploitable condition in rare cases.
Affected configurations
Node
mozillafirefoxRange<19
ORmozillaseamonkeyRange<2.16
Related
openvas
openvas
Fedora Update for seamonkey FEDORA-2013-2988
2013-03-05 00:00:00
Mozilla Firefox Security Advisory (MFSA2013-23) - Linux
2021-11-11 00:00:00
Fedora Update for seamonkey FEDORA-2013-2988
2013-03-05 00:00:00
nessus
nessus
Fedora 17 : seamonkey-2.16-1.fc17 (2013-2988)
2013-03-05 00:00:00
Fedora 18 : seamonkey-2.16-1.fc18 (2013-2992)
2013-03-05 00:00:00
prion
prion
Design/Logic Flaw
2013-02-19 23:55:00
fedora
fedora
[SECURITY] Fedora 17 Update: seamonkey-2.16-1.fc17
2013-03-04 22:29:49
[SECURITY] Fedora 18 Update: seamonkey-2.16-1.fc18
2013-03-04 22:43:33
ubuntucve
ubuntucve
CVE-2013-0765
2013-02-20 00:00:00
nvd
nvd
CVE-2013-0765
2013-02-19 23:55:01
cve
cve
CVE-2013-0765
2013-02-19 23:55:01
cvelist
cvelist
CVE-2013-0765
2013-02-19 23:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-02-19 00:00:00
suse
suse
Security update for Mozilla Firefox (important)
2013-03-08 22:04:48
Security update for Mozilla Firefox (important)
2013-03-15 19:04:45
Mozilla: February 2013 update round (Firefox 19) (important)
2013-02-22 14:04:25
googleprojectzero
googleprojectzero
Attacking ECMAScript Engines with Redefinition
2015-08-17 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2013-02-20 00:00:00
Firefox regression
2013-03-01 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-02-24 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-09-27 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.01
Percentile
83.8%
Related for MFSA2013-23