Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-1717

Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly restrict local-filesystem access by Java applets, which allows user-assisted remote attackers to read arbitrary files by leveraging a download to a fixed pathname or other predictable pathname.

Published

2013-08-07T01:55:05.020

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.4 (MEDIUM)

CVSSv2 Vector

AV:N/AC:H/Au:N/C:C/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: HIGH
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

4.9

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-264
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mozilla thunderbird_esr 17.0 Yes
Application mozilla thunderbird_esr 17.0.1 Yes
Application mozilla thunderbird_esr 17.0.2 Yes
Application mozilla thunderbird_esr 17.0.3 Yes
Application mozilla thunderbird_esr 17.0.4 Yes
Application mozilla thunderbird_esr 17.0.5 Yes
Application mozilla thunderbird_esr 17.0.6 Yes
Application mozilla thunderbird_esr 17.0.7 Yes
Application mozilla firefox ≤ 22.0 Yes
Application mozilla firefox 19.0 Yes
Application mozilla firefox 19.0.1 Yes
Application mozilla firefox 19.0.2 Yes
Application mozilla firefox 20.0 Yes
Application mozilla firefox 20.0.1 Yes
Application mozilla firefox 21.0 Yes
Application mozilla seamonkey ≤ 2.20 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0.1 Yes
Application mozilla seamonkey 2.0.2 Yes
Application mozilla seamonkey 2.0.3 Yes
Application mozilla seamonkey 2.0.4 Yes
Application mozilla seamonkey 2.0.5 Yes
Application mozilla seamonkey 2.0.6 Yes
Application mozilla seamonkey 2.0.7 Yes
Application mozilla seamonkey 2.0.8 Yes
Application mozilla seamonkey 2.0.9 Yes
Application mozilla seamonkey 2.0.10 Yes
Application mozilla seamonkey 2.0.11 Yes
Application mozilla seamonkey 2.0.12 Yes
Application mozilla seamonkey 2.0.13 Yes
Application mozilla seamonkey 2.0.14 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.2 Yes
Application mozilla seamonkey 2.2 Yes
Application mozilla seamonkey 2.2 Yes
Application mozilla seamonkey 2.2 Yes
Application mozilla seamonkey 2.3 Yes
Application mozilla seamonkey 2.3 Yes
Application mozilla seamonkey 2.3 Yes
Application mozilla seamonkey 2.3 Yes
Application mozilla seamonkey 2.3.1 Yes
Application mozilla seamonkey 2.3.2 Yes
Application mozilla seamonkey 2.3.3 Yes
Application mozilla seamonkey 2.4 Yes
Application mozilla seamonkey 2.4 Yes
Application mozilla seamonkey 2.4 Yes
Application mozilla seamonkey 2.4 Yes
Application mozilla seamonkey 2.4.1 Yes
Application mozilla seamonkey 2.5 Yes
Application mozilla seamonkey 2.5 Yes
Application mozilla seamonkey 2.5 Yes
Application mozilla seamonkey 2.5 Yes
Application mozilla seamonkey 2.5 Yes
Application mozilla seamonkey 2.6 Yes
Application mozilla seamonkey 2.6 Yes
Application mozilla seamonkey 2.6 Yes
Application mozilla seamonkey 2.6 Yes
Application mozilla seamonkey 2.6 Yes
Application mozilla seamonkey 2.6.1 Yes
Application mozilla seamonkey 2.7 Yes
Application mozilla seamonkey 2.7 Yes
Application mozilla seamonkey 2.7 Yes
Application mozilla seamonkey 2.7 Yes
Application mozilla seamonkey 2.7 Yes
Application mozilla seamonkey 2.7 Yes
Application mozilla seamonkey 2.7.1 Yes
Application mozilla seamonkey 2.7.2 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.9 Yes
Application mozilla seamonkey 2.9 Yes
Application mozilla seamonkey 2.9 Yes
Application mozilla seamonkey 2.9 Yes
Application mozilla seamonkey 2.9 Yes
Application mozilla seamonkey 2.9.1 Yes
Application mozilla seamonkey 2.10 Yes
Application mozilla seamonkey 2.10 Yes
Application mozilla seamonkey 2.10 Yes
Application mozilla seamonkey 2.10 Yes
Application mozilla seamonkey 2.10.1 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12.1 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13.1 Yes
Application mozilla seamonkey 2.13.2 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15.1 Yes
Application mozilla seamonkey 2.15.2 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16.1 Yes
Application mozilla seamonkey 2.16.2 Yes
Application mozilla seamonkey 2.17 Yes
Application mozilla seamonkey 2.17 Yes
Application mozilla seamonkey 2.17 Yes
Application mozilla seamonkey 2.17 Yes
Application mozilla seamonkey 2.17 Yes
Application mozilla seamonkey 2.17.1 Yes
Application mozilla seamonkey 2.18 Yes
Application mozilla seamonkey 2.18 Yes
Application mozilla seamonkey 2.18 Yes
Application mozilla seamonkey 2.18 Yes
Application mozilla seamonkey 2.19 Yes
Application mozilla seamonkey 2.19 Yes
Application mozilla seamonkey 2.19 Yes
Application mozilla seamonkey 2.20 Yes
Application mozilla seamonkey 2.20 Yes
Application mozilla firefox 17.0 Yes
Application mozilla firefox 17.0.1 Yes
Application mozilla firefox 17.0.2 Yes
Application mozilla firefox 17.0.3 Yes
Application mozilla firefox 17.0.4 Yes
Application mozilla firefox 17.0.5 Yes
Application mozilla firefox 17.0.6 Yes
Application mozilla firefox 17.0.7 Yes
Application mozilla thunderbird ≤ 17.0.7 Yes
Application mozilla thunderbird 17.0 Yes
Application mozilla thunderbird 17.0.1 Yes
Application mozilla thunderbird 17.0.2 Yes
Application mozilla thunderbird 17.0.3 Yes
Application mozilla thunderbird 17.0.4 Yes
Application mozilla thunderbird 17.0.5 Yes
Application mozilla thunderbird 17.0.6 Yes
References