CVE-2013-1713
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8,...
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks or install arbitrary add-ons via a crafted web site.
Exploit likelihood
What each source reports
NVD Score used
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks or install arbitrary add-ons via a crafted web site.
- Record
CVE-2013-1713- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks or install arbitrary add-ons via a crafted web site.
- Record
CVE-2013-1713- Updated
- 2026-11-02
EUVDEUVD-2013-1740 No score
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks or install arbitrary add-ons via a crafted web site.
- Record
EUVD-2013-1740- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pjg7-3h5g-h9f9 No score
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8,...
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks or install arbitrary add-ons via a crafted web site.
- Record
GHSA-pjg7-3h5g-h9f9- Updated
- 2026-11-02
OSVMGASA-2013-0248 No score
Updated firefox and thunderbird packages fix security vulnerabilities
Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code (CVE-2013-1701).
Mozilla security researcher moz_bug_r_a4 reported that through an interaction of frames and browser history it was possible to make the browser believe attacker-supplied content came from the location of a previous page in browser history. This allows for cross-site scripting (XSS) attacks by loading scripts from a misrepresented malicious site through relative locations and the potential access of stored credentials of a spoofed site (CVE-2013-1709).
Mozilla security researcher moz_bug_r_a4 reported a mechanism to execute arbitrary code or a cross-site scripting (XSS) attack when Certificate Request Message Format (CRMF) request is generated in certain circumstances (CVE-2013-1710).
Security researcher Cody Crews reported that some Javascript components will perform checks against the wrong uniform resource identifier (URI) before performing security sensitive actions. This will return an incorrect location for the originator of the call. This could be used to bypass same-origin policy, allowing for cross-site scripting (XSS) or the installation of malicious add-ons from third-party pages (CVE-2013-1713).
Mozilla community member Federico Lanusse reported a mechanism where a web worker can violate same-origin policy and bypass cross-origin checks through XMLHttpRequest. This could allow for cross-site scripting (XSS) attacks by web workers (CVE-2013-1714).
Security researcher Georgi Guninski reported an issue with Java applets where in some circumstances the applet could access files on the local system when loaded using the a file:/// URI and violate file origin policy due to interaction with the codebase parameter. This affects applets running on the local file system. Mozilla developer John Schoenick later discovered that fixes for this issue were inadequate and allowed the invocation of Java applets to bypass security checks in additional circumstances. This could lead to untrusted Java applets having read-only access on the local files system if used in conjunction with a method to download a file to a known or guessable path (CVE-2013-1717).
- Record
MGASA-2013-0248- Updated
- 2026-11-02
OSVMGASA-2013-0329 No score
Updated iceape packages fix many vulnerabilities
Updated iceape packages fix security issues:
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2013-1682)
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2013-1683)
Use-after-free vulnerability in the mozilla::dom::HTMLMediaElement::LookupMediaElementURITable function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site. (CVE-2013-1684)
Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site. (CVE-2013-1685)
Use-after-free vulnerability in the mozilla::ResetDir function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. (CVE-2013-1686)
The System Only Wrapper (SOW) and Chrome Object Wrapper (COW) implementations in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly restrict XBL user-defined functions, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges, or conduct cross-site scripting (XSS) attacks, via a crafted web site. (CVE-2013-1687)
Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location. (CVE-2013-1690)
Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not prevent the inclusion of body data in an XMLHttpRequest HEAD request, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web site. (CVE-2013-1692)
The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to read pixel values, and possibly bypass the Same Origin Policy and read text from a different domain, by observing timing differences in execution of filter code. (CVE-2013-1693)
The PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly handle the lack of a wrapper, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by leveraging unintended clearing of the wrapper cache's preserved-wrapper flag. (CVE-2013-1694)
Mozilla Firefox before 22.0 does not properly implement certain DocShell inheritance behavior for the sandbox attribute of an IFRAME element, which allows remote attackers to bypass intended access restrictions via a FRAME element within an IFRAME element.…
- Record
MGASA-2013-0329- Updated
- 2026-11-02
Show 6 moreShow less
OSVopenSUSE-SU-2024:10071-1 No score
MozillaFirefox-50.1.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10071-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10218-1 No score
seamonkey-2.40-6.1 on GA media
These are all security issues fixed in the seamonkey-2.40-6.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10218-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10230-1 No score
MozillaThunderbird-45.5.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10230-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0446-1 No score
Security update for Mozilla Firefox
This update to Firefox 17.0.9esr (bnc#840485) addresses:
* MFSA 2013-91 User-defined properties on DOM proxies get the wrong
'this' object
o (CVE-2013-1737)
* MFSA 2013-90 Memory corruption involving scrolling
o use-after-free in mozilla::layout::ScrollbarActivity
(CVE-2013-1735)
o Memory corruption in nsGfxScrollFrameInner::IsLTR()
(CVE-2013-1736)
* MFSA 2013-89 Buffer overflow with multi-column, lists, and floats
o buffer overflow at nsFloatManager::GetFlowArea() with multicol,
list, floats (CVE-2013-1732)
* MFSA 2013-88 compartment mismatch re-attaching XBL-backed nodes
o compartment mismatch in nsXBLBinding::DoInitJSClass
(CVE-2013-1730)
* MFSA 2013-83 Mozilla Updater does not lock MAR file after signature
verification
o MAR signature bypass in Updater could lead to downgrade
(CVE-2013-1726)
* MFSA 2013-82 Calling scope for new Javascript objects can lead to
memory corruption
o ABORT: bad scope for new JSObjects: ReparentWrapper /
document.open (CVE-2013-1725)
* MFSA 2013-79 Use-after-free in Animation Manager during stylesheet
cloning
o Heap-use-after-free in nsAnimationManager::BuildAnimations
(CVE-2013-1722)
* MFSA 2013-76 Miscellaneous memory safety hazards (rv:24.0 /
rv:17.0.9)
o Memory safety bugs fixed in Firefox 17.0.9 and Firefox 24.0
(CVE-2013-1718)
* MFSA 2013-65 Buffer underflow when generating CRMF requests
o ASAN heap-buffer-overflow (read 1) in
cryptojs_interpret_key_gen_type (CVE-2013-1705)
Security Issue references:
* CVE-2013-1737
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1737>
* CVE-2013-1735
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1735>
* CVE-2013-1736
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1736>
* CVE-2013-1732
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1732>
* CVE-2013-1730
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1730>
* CVE-2013-1726
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1726>
* CVE-2013-1725
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1725>
* CVE-2013-1722
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1722>
* CVE-2013-1718
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1718>
* CVE-2013-1705
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1705>
- Record
SUSE-SU-2015:0446-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0447-1 No score
Security update for Mozilla Firefox
This update to Firefox 17.0.9esr (bnc#840485) addresses:
* MFSA 2013-91 User-defined properties on DOM proxies get the wrong
'this' object
o (CVE-2013-1737)
* MFSA 2013-90 Memory corruption involving scrolling
o use-after-free in mozilla::layout::ScrollbarActivity
(CVE-2013-1735)
o Memory corruption in nsGfxScrollFrameInner::IsLTR()
(CVE-2013-1736)
* MFSA 2013-89 Buffer overflow with multi-column, lists, and floats
o buffer overflow at nsFloatManager::GetFlowArea() with multicol,
list, floats (CVE-2013-1732)
* MFSA 2013-88 compartment mismatch re-attaching XBL-backed nodes
o compartment mismatch in nsXBLBinding::DoInitJSClass
(CVE-2013-1730)
* MFSA 2013-83 Mozilla Updater does not lock MAR file after signature
verification
o MAR signature bypass in Updater could lead to downgrade
(CVE-2013-1726)
* MFSA 2013-82 Calling scope for new Javascript objects can lead to
memory corruption
o ABORT: bad scope for new JSObjects: ReparentWrapper /
document.open (CVE-2013-1725)
* MFSA 2013-79 Use-after-free in Animation Manager during stylesheet
cloning
o Heap-use-after-free in nsAnimationManager::BuildAnimations
(CVE-2013-1722)
* MFSA 2013-76 Miscellaneous memory safety hazards (rv:24.0 /
rv:17.0.9)
o Memory safety bugs fixed in Firefox 17.0.9 and Firefox 24.0
(CVE-2013-1718)
* MFSA 2013-65 Buffer underflow when generating CRMF requests
o ASAN heap-buffer-overflow (read 1) in
cryptojs_interpret_key_gen_type (CVE-2013-1705)
Security Issue references:
* CVE-2013-1737
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1737>
* CVE-2013-1735
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1735>
* CVE-2013-1736
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1736>
* CVE-2013-1732
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1732>
* CVE-2013-1730
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1730>
* CVE-2013-1726
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1726>
* CVE-2013-1725
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1725>
* CVE-2013-1722
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1722>
* CVE-2013-1718
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1718>
* CVE-2013-1705
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1705>
- Record
SUSE-SU-2015:0447-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
iceweaselDebian:7 From an advisory covering 6 CVEs |
before 17.0.8esr-1~deb7u1, plus listed versions 10.0.12esr-110.0.12esr-1+alpha10.0.12esr-1+nmu110.0.12esr-1+nmu1+alpha11.0-1 Show 36 moreShow less11.0-211.0-311.0-411.0~b1-111.0~b1-211.0~b2-111.0~b3-111.0~b4-111.0~b5-111.0~b6-112.0-112.0-212.0-312.0-412.0-512.0-612.0-713.0-113.0.1-113.0.1-214.0.1-114.0.1-215.0-115.0.1-116.0-116.0.1-116.0.2-117.0-117.0.1-117.0.1-217.0.5esr-117.0.6esr-117.0.6esr-1~deb7u117.0.7esr-117.0.7esr-1~deb7u117.0.7esr-2 |
17.0.8esr-1~deb7u1 |
icedoveDebian:7 From an advisory covering 6 CVEs |
before 17.0.8-1~deb7u1, plus listed versions 10.0.12-111.0-116.0.2-117.0-117.0.2-1 Show 5 moreShow less17.0.4-117.0.5-117.0.5-217.0.7-117.0.7-1~deb7u1 |
17.0.8-1~deb7u1 |
firefoxMageia:2 From an advisory covering 6 CVEs |
before 17.0.8-1.mga2 | 17.0.8-1.mga2 |
firefox-l10nMageia:2 From an advisory covering 6 CVEs |
before 17.0.8-1.mga2 | 17.0.8-1.mga2 |
thunderbirdMageia:2 From an advisory covering 6 CVEs |
before 17.0.8-1.mga2 | 17.0.8-1.mga2 |
thunderbird-l10nMageia:2 From an advisory covering 6 CVEs |
before 17.0.8-1.mga2 | 17.0.8-1.mga2 |
firefoxMageia:3 From an advisory covering 6 CVEs |
before 17.0.8-1.mga3 | 17.0.8-1.mga3 |
firefox-l10nMageia:3 From an advisory covering 6 CVEs |
before 17.0.8-1.mga3 | 17.0.8-1.mga3 |
thunderbirdMageia:3 From an advisory covering 6 CVEs |
before 17.0.8-1.mga3 | 17.0.8-1.mga3 |
thunderbird-l10nMageia:3 From an advisory covering 6 CVEs |
before 17.0.8-1.mga3 | 17.0.8-1.mga3 |
Show 38 moreShow less
| Package | Affected | Fixed |
|---|---|---|
iceapeMageia:2 From an advisory covering 55 CVEs |
before 2.22-1.mga2 | 2.22-1.mga2 |
iceapeMageia:3 From an advisory covering 55 CVEs |
before 2.22-1.mga3 | 2.22-1.mga3 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:17.0.8-1.el5_9 | 0:17.0.8-1.el5_9 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:17.0.8-1.el5_9 | 0:17.0.8-1.el5_9 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:17.0.8-3.el5_9 | 0:17.0.8-3.el5_9 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:17.0.8-3.el5_9 | 0:17.0.8-3.el5_9 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:17.0.8-3.el5_9 | 0:17.0.8-3.el5_9 |
firefoxRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:17.0.8-1.el6_4 | 0:17.0.8-1.el6_4 |
firefox-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:17.0.8-1.el6_4 | 0:17.0.8-1.el6_4 |
xulrunnerRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:17.0.8-3.el6_4 | 0:17.0.8-3.el6_4 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:17.0.8-3.el6_4 | 0:17.0.8-3.el6_4 |
xulrunner-develRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:17.0.8-3.el6_4 | 0:17.0.8-3.el6_4 |
firefoxRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:17.0.8-1.el6_4 | 0:17.0.8-1.el6_4 |
firefox-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:17.0.8-1.el6_4 | 0:17.0.8-1.el6_4 |
xulrunnerRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:17.0.8-3.el6_4 | 0:17.0.8-3.el6_4 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:17.0.8-3.el6_4 | 0:17.0.8-3.el6_4 |
xulrunner-develRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:17.0.8-3.el6_4 | 0:17.0.8-3.el6_4 |
firefoxRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:17.0.8-1.el6_4 | 0:17.0.8-1.el6_4 |
firefox-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:17.0.8-1.el6_4 | 0:17.0.8-1.el6_4 |
xulrunnerRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:17.0.8-3.el6_4 | 0:17.0.8-3.el6_4 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:17.0.8-3.el6_4 | 0:17.0.8-3.el6_4 |
xulrunner-develRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:17.0.8-3.el6_4 | 0:17.0.8-3.el6_4 |
firefoxRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:17.0.8-1.el6_4 | 0:17.0.8-1.el6_4 |
firefox-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:17.0.8-1.el6_4 | 0:17.0.8-1.el6_4 |
xulrunnerRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:17.0.8-3.el6_4 | 0:17.0.8-3.el6_4 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:17.0.8-3.el6_4 | 0:17.0.8-3.el6_4 |
xulrunner-develRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:17.0.8-3.el6_4 | 0:17.0.8-3.el6_4 |
thunderbirdRed Hat:rhel_productivity:5 From an advisory covering 6 CVEs |
before 0:17.0.8-5.el5_9 | 0:17.0.8-5.el5_9 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 From an advisory covering 6 CVEs |
before 0:17.0.8-5.el5_9 | 0:17.0.8-5.el5_9 |
thunderbirdRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:17.0.8-5.el6_4 | 0:17.0.8-5.el6_4 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:17.0.8-5.el6_4 | 0:17.0.8-5.el6_4 |
thunderbirdRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:17.0.8-5.el6_4 | 0:17.0.8-5.el6_4 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:17.0.8-5.el6_4 | 0:17.0.8-5.el6_4 |
thunderbirdRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:17.0.8-5.el6_4 | 0:17.0.8-5.el6_4 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:17.0.8-5.el6_4 | 0:17.0.8-5.el6_4 |
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 899 CVEs |
before 50.1.0-1.1 | 50.1.0-1.1 |
MozillaThunderbirdopenSUSE:Tumbleweed From an advisory covering 560 CVEs |
before 45.5.1-1.1 | 45.5.1-1.1 |
firefox-esropenSUSE:Tumbleweed From an advisory covering 1860 CVEs |
before 128.5.1-1.1 | 128.5.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-1713 is a medium vulnerability (CVSS 4.3) in Mozilla Firefox, published August 7, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.62%, the 76th percentile. No source names a fixed version.
References
debian.org/security/2013/dsa-2746
mozilla.org/security/announce/2013/mfsa2013-72.html
bugzilla.mozilla.org/show_bug.cgi?id=887098
securityfocus.com/bid/61876
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18884
Show 194 moreShow less
nvd.nist.gov/vuln/detail/CVE-2013-1713
github.com/advisories/GHSA-pjg7-3h5g-h9f9
advisories.mageia.org/MGASA-2013-0248.html
bugs.mageia.org/show_bug.cgi?id=10946
mandriva.com/en/support/security/advisories/advisory/MDVSA-2013:210
access.redhat.com/errata/RHSA-2013:1140
bugzilla.redhat.com/show_bug.cgi?id=993598
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1140.json
cve.org/CVERecord?id=CVE-2013-1701
suse.com/support/update/announcement/2015/suse-su-20150446-1
bugzilla.suse.com/833389
lists.opensuse.org/archives/list/[email protected]/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V
Left out here: 1,996 references and the rest of 1 source description. The JSON record has them.