CVE-2013-1726 — Mozilla Firefox vulnerability

CWE-2643 documents3 sources
Severity
6.2MEDIUMNVD
EPSS
0.1%
top 71.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Mozilla FirefoxMozilla SeamonkeyMozilla Thunderbird+1 more
Timeline
PublishedSep 18
Latest updateMay 17

Description

Mozilla Updater in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 does not ensure exclusive access to a MAR file, which allows local users to gain privileges by creating a Trojan horse file after MAR signature verification but before MAR use.

CVSS vector

AV:L/AC:H/C:C/I:C/A:CExploitability: 1.9 | Impact: 10.0

Affected Packages4 packages

▶NVDmozilla/firefox23.0.1+17
▶NVDmozilla/thunderbird17.0.9+9
▶NVDmozilla/thunderbird_esr9 versions+8
▶NVDmozilla/seamonkey2.20+36

🔴Vulnerability Details

2
GHSA
GHSA-mvcf-5p4m-53vh: Mozilla Updater in Mozilla Firefox before 24↗2022-05-17
▶
CVEList
CVE-2013-1726: Mozilla Updater in Mozilla Firefox before 24↗2013-09-18
▶
CVE-2013-1726 — Mozilla Firefox vulnerability | cvebase