Description
Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging improper interaction between plugin objects and SVG elements.
Metrics
CVSS 2.0 9.3/10
AV:N/AC:M/Au:N/C:C/I:C/A:CWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.htmlMailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0144.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0145.htmlThird Party Advisory
- http://www.mozilla.org/security/announce/2013/mfsa2013-15.htmlVendor Advisory
- http://www.ubuntu.com/usn/USN-1681-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-1681-2Third Party Advisory
- http://www.ubuntu.com/usn/USN-1681-4Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=813906Issue Tracking, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17087Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.htmlMailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0144.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0145.htmlThird Party Advisory
- http://www.mozilla.org/security/announce/2013/mfsa2013-15.htmlVendor Advisory
- http://www.ubuntu.com/usn/USN-1681-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-1681-2Third Party Advisory
- http://www.ubuntu.com/usn/USN-1681-4Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=813906Issue Tracking, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17087Third Party Advisory
Timeline
- Published
- Jan 13, 2013
- Last modified
- Jun 16, 2026
- NVD status
- Modified