CVE-2013-0774

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent JavaScript workers from reading the browser-profile directory name, which has unspecified impact and remote attack vectors.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.htmlMailing List, Third Party Advisory
http://www.mozilla.org/security/announce/2013/mfsa2013-25.htmlVendor Advisory
http://www.ubuntu.com/usn/USN-1729-1Third Party Advisory
http://www.ubuntu.com/usn/USN-1729-2Third Party Advisory
http://www.ubuntu.com/usn/USN-1748-1Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=827193Exploit, Issue Tracking, Patch, Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16797Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.htmlMailing List, Third Party Advisory
http://www.mozilla.org/security/announce/2013/mfsa2013-25.htmlVendor Advisory
http://www.ubuntu.com/usn/USN-1729-1Third Party Advisory
http://www.ubuntu.com/usn/USN-1729-2Third Party Advisory
http://www.ubuntu.com/usn/USN-1748-1Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=827193Exploit, Issue Tracking, Patch, Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16797Third Party Advisory

Timeline

Published: Feb 19, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013