Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-0795

The System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 does not prevent use of the cloneNode method for cloning a protected node, which allows remote attackers to bypass the Same Origin Policy or possibly execute arbitrary JavaScript code with chrome privileges via a crafted web site.

Published

2013-04-03T11:56:21.197

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-264
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mozilla firefox ≤ 19.0.2 Yes
Application mozilla firefox 19.0 Yes
Application mozilla firefox 19.0.1 Yes
Application mozilla firefox 17.0 Yes
Application mozilla firefox 17.0.1 Yes
Application mozilla firefox 17.0.2 Yes
Application mozilla firefox 17.0.3 Yes
Application mozilla firefox 17.0.4 Yes
Application mozilla thunderbird 17.0 Yes
Application mozilla thunderbird 17.0.1 Yes
Application mozilla thunderbird 17.0.2 Yes
Application mozilla thunderbird 17.0.3 Yes
Application mozilla thunderbird 17.0.4 Yes
Application mozilla thunderbird_esr 17.0 Yes
Application mozilla thunderbird_esr 17.0.1 Yes
Application mozilla thunderbird_esr 17.0.2 Yes
Application mozilla thunderbird_esr 17.0.3 Yes
Application mozilla thunderbird_esr 17.0.4 Yes
Application mozilla seamonkey ≤ 2.17 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0.1 Yes
Application mozilla seamonkey 2.0.2 Yes
Application mozilla seamonkey 2.0.3 Yes
Application mozilla seamonkey 2.0.4 Yes
Application mozilla seamonkey 2.0.5 Yes
Application mozilla seamonkey 2.0.6 Yes
Application mozilla seamonkey 2.0.7 Yes
Application mozilla seamonkey 2.0.8 Yes
Application mozilla seamonkey 2.0.9 Yes
Application mozilla seamonkey 2.0.10 Yes
Application mozilla seamonkey 2.0.11 Yes
Application mozilla seamonkey 2.0.12 Yes
Application mozilla seamonkey 2.0.13 Yes
Application mozilla seamonkey 2.0.14 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.2 Yes
Application mozilla seamonkey 2.2 Yes
Application mozilla seamonkey 2.2 Yes
Application mozilla seamonkey 2.2 Yes
Application mozilla seamonkey 2.3 Yes
Application mozilla seamonkey 2.3 Yes
Application mozilla seamonkey 2.3 Yes
Application mozilla seamonkey 2.3 Yes
Application mozilla seamonkey 2.3.1 Yes
Application mozilla seamonkey 2.3.2 Yes
Application mozilla seamonkey 2.3.3 Yes
Application mozilla seamonkey 2.4 Yes
Application mozilla seamonkey 2.4 Yes
Application mozilla seamonkey 2.4 Yes
Application mozilla seamonkey 2.4 Yes
Application mozilla seamonkey 2.4.1 Yes
Application mozilla seamonkey 2.5 Yes
Application mozilla seamonkey 2.5 Yes
Application mozilla seamonkey 2.5 Yes
Application mozilla seamonkey 2.5 Yes
Application mozilla seamonkey 2.5 Yes
Application mozilla seamonkey 2.6 Yes
Application mozilla seamonkey 2.6 Yes
Application mozilla seamonkey 2.6 Yes
Application mozilla seamonkey 2.6 Yes
Application mozilla seamonkey 2.6 Yes
Application mozilla seamonkey 2.6.1 Yes
Application mozilla seamonkey 2.7 Yes
Application mozilla seamonkey 2.7 Yes
Application mozilla seamonkey 2.7 Yes
Application mozilla seamonkey 2.7 Yes
Application mozilla seamonkey 2.7 Yes
Application mozilla seamonkey 2.7 Yes
Application mozilla seamonkey 2.7.1 Yes
Application mozilla seamonkey 2.7.2 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.9 Yes
Application mozilla seamonkey 2.9 Yes
Application mozilla seamonkey 2.9 Yes
Application mozilla seamonkey 2.9 Yes
Application mozilla seamonkey 2.9 Yes
Application mozilla seamonkey 2.9.1 Yes
Application mozilla seamonkey 2.10 Yes
Application mozilla seamonkey 2.10 Yes
Application mozilla seamonkey 2.10 Yes
Application mozilla seamonkey 2.10 Yes
Application mozilla seamonkey 2.10.1 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12.1 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13.1 Yes
Application mozilla seamonkey 2.13.2 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15.1 Yes
Application mozilla seamonkey 2.15.2 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16.1 Yes
Application mozilla seamonkey 2.16.2 Yes
Application mozilla seamonkey 2.17 Yes
Application mozilla seamonkey 2.17 Yes
Application mozilla seamonkey 2.17 Yes
References