Mozilla: Local Java applets may read contents of local file system (MFSA 2013-75)
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
Configuration 3 [-]
|
Configuration 4 [-]
|
Configuration 5 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 5 | |||
| thunderbird-0:17.0.8-5.el5_9 | cpe:/a:redhat:rhel_productivity:5 | RHSA-2013:1142 | 2013-08-07T00:00:00Z |
| firefox-0:17.0.8-1.el5_9 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2013:1140 | 2013-08-07T00:00:00Z |
| xulrunner-0:17.0.8-3.el5_9 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2013:1140 | 2013-08-07T00:00:00Z |
| Red Hat Enterprise Linux 6 | |||
| firefox-0:17.0.8-1.el6_4 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2013:1140 | 2013-08-07T00:00:00Z |
| xulrunner-0:17.0.8-3.el6_4 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2013:1140 | 2013-08-07T00:00:00Z |
| thunderbird-0:17.0.8-5.el6_4 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2013:1142 | 2013-08-07T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2735-1 | iceweasel security update |
Debian DSA |
DSA-2746-1 | icedove security update |
EUVD |
EUVD-2013-1744 | Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly restrict local-filesystem access by Java applets, which allows user-assisted remote attackers to read arbitrary files by leveraging a download to a fixed pathname or other predictable pathname. |
Ubuntu USN |
USN-1924-1 | Firefox vulnerabilities |
Ubuntu USN |
USN-1925-1 | Thunderbird vulnerabilities |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 2.4% (2.404% probability within 30 days)
Key SSVC decision points have not yet been added.
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:mozilla:firefox_esr:17.0:*:*:*:*:*:*:* |
cpe:2.3:a:mozilla:firefox:17.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:17.0:*:*:*:*:*:*:* |
| Vendors & Products |
Mozilla firefox Esr
|
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:mozilla:firefox_esr:17.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:17.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:17.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:17.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:17.0.7:*:*:*:*:*:*:* |
cpe:2.3:a:mozilla:firefox:17.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:17.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:17.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:17.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:17.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:17.0.7:*:*:*:*:*:*:* |