CVE-2013-0799

high

Description

Buffer overflow in the Mozilla Maintenance Service in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, and Thunderbird ESR 17.x before 17.0.5 on Windows allows local users to gain privileges via crafted arguments.

References

http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html

http://www.mozilla.org/security/announce/2013/mfsa2013-32.html

https://bugzilla.mozilla.org/show_bug.cgi?id=848417

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17155

Details

Source: MITRE

Published: 2013-04-03

Updated: 2017-09-19

Type: CWE-119

Risk Information

CVSS v2

Base Score: 7.2

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 3.9

Severity: HIGH