CVE-2013-0794 — Mozilla Firefox vulnerability

4 documents4 sources
Severity
5.8MEDIUMNVD
EPSS
0.6%
top 29.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Mozilla FirefoxMozilla Seamonkey
Timeline
PublishedApr 3
Latest updateMay 17

Description

Mozilla Firefox before 20.0 and SeaMonkey before 2.17 do not prevent origin spoofing of tab-modal dialogs, which allows remote attackers to conduct phishing attacks via a crafted web site.

CVSS vector

AV:N/AC:M/C:P/I:P/A:NExploitability: 8.6 | Impact: 4.9

Affected Packages2 packages

▶NVDmozilla/firefox19.0.2+2
▶NVDmozilla/seamonkey2.17+48

🔴Vulnerability Details

2
GHSA
GHSA-3g24-jm9m-c47r: Mozilla Firefox before 20↗2022-05-17
▶
CVEList
CVE-2013-0794: Mozilla Firefox before 20↗2013-04-03
▶

📋Vendor Advisories

1
Ubuntu
Firefox vulnerabilities↗2013-04-04
▶
CVE-2013-0794 — Mozilla Firefox vulnerability | cvebase