6.9
CVSSv2

CVE-2013-0797

Published: 03/04/2013 Updated: 19/09/2017
CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4
VMScore: 614
Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Untrusted search path vulnerability in the Mozilla Updater in Mozilla Firefox prior to 20.0, Firefox ESR 17.x prior to 17.0.5, Thunderbird prior to 17.0.5, Thunderbird ESR 17.x prior to 17.0.5, and SeaMonkey prior to 2.17 allows local users to gain privileges via a Trojan horse DLL file in an unspecified directory.

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox 19.0

mozilla firefox 19.0.1

mozilla firefox

mozilla firefox esr 17.0.3

mozilla firefox esr 17.0.4

mozilla firefox esr 17.0.2

mozilla firefox esr 17.0.1

mozilla firefox esr 17.0

mozilla thunderbird 17.0

mozilla thunderbird 17.0.1

mozilla thunderbird 17.0.3

mozilla thunderbird 17.0.4

mozilla thunderbird 17.0.2

mozilla thunderbird esr 17.0

mozilla thunderbird esr 17.0.3

mozilla thunderbird esr 17.0.4

mozilla thunderbird esr 17.0.1

mozilla thunderbird esr 17.0.2

mozilla seamonkey 2.17

mozilla seamonkey 2.16

mozilla seamonkey 2.15.1

mozilla seamonkey 2.15

mozilla seamonkey 2.14

mozilla seamonkey 2.0.3

mozilla seamonkey 2.0.2

mozilla seamonkey 2.0.14

mozilla seamonkey 2.0.10

mozilla seamonkey 2.0

mozilla seamonkey 2.16.1

mozilla seamonkey 2.15.2

mozilla seamonkey 2.0.4

mozilla seamonkey 2.0.12

mozilla seamonkey 2.10

mozilla seamonkey 2.11

mozilla seamonkey 2.13

mozilla seamonkey 2.0.8

mozilla seamonkey 2.0.7

mozilla seamonkey 2.1

mozilla seamonkey 2.3

mozilla seamonkey 2.13.1

mozilla seamonkey 2.12

mozilla seamonkey 2.2

mozilla seamonkey 2.7.1

mozilla seamonkey 2.8

mozilla seamonkey 2.5

mozilla seamonkey 2.7

mozilla seamonkey

mozilla seamonkey 2.16.2

mozilla seamonkey 2.0.11

mozilla seamonkey 2.0.13

mozilla seamonkey 2.10.1

mozilla seamonkey 2.0.9

mozilla seamonkey 2.3.1

mozilla seamonkey 2.7.2

mozilla seamonkey 2.6

mozilla seamonkey 2.13.2

mozilla seamonkey 2.3.3

mozilla seamonkey 2.4

mozilla seamonkey 2.3.2

mozilla seamonkey 2.9

mozilla seamonkey 2.0.1

mozilla seamonkey 2.0.6

mozilla seamonkey 2.0.5

mozilla seamonkey 2.12.1

mozilla seamonkey 2.4.1

mozilla seamonkey 2.9.1

mozilla seamonkey 2.6.1

Vendor Advisories

Mozilla Foundation Security Advisory 2013-34 Privilege escalation through Mozilla Updater Announced April 2, 2013 Reporter Ash Impact High Products Firefox, Firefox ESR, SeaMonkey, Thunderbird, Thunderbird ESR Fixed in ...