Attacker Value

Unknown

(0 users assessed)

Exploitability

Unknown

(0 users assessed)

User Interaction

Unknown

Privileges Required

Unknown

Attack Vector

Unknown

0

CVE-2013-0759

Disclosure Date: January 13, 2013 •

MITRE ATT&CK

Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to spoof the address bar via vectors involving authentication information in the userinfo field of a URL, in conjunction with a 204 (aka No Content) HTTP status code.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

None

Impact Score:

Unknown

Exploitability Score:

Unknown

Vector:

Attack Vector (AV):

Unknown

Attack Complexity (AC):

Unknown

Privileges Required (PR):

Unknown

User Interaction (UI):

Unknown

Scope (S):

Unknown

Confidentiality (C):

Unknown

Integrity (I):

Unknown

Availability (A):

Unknown

Vendors

canonical,
mozilla,
opensuse,
redhat,
suse

Products

enterprise linux desktop 5.0,
enterprise linux desktop 6.0,
enterprise linux eus 5.9,
enterprise linux eus 6.3,
enterprise linux server 5.0,
enterprise linux server 6.0,
enterprise linux server aus 5.9,
enterprise linux workstation 5.0,
enterprise linux workstation 6.0,
firefox,
linux enterprise desktop 10,
linux enterprise desktop 11,
linux enterprise server 10,
linux enterprise server 11,
linux enterprise software development kit 10,
linux enterprise software development kit 11,
opensuse 11.4,
opensuse 12.1,
opensuse 12.2,
seamonkey,
thunderbird,
thunderbird esr,
ubuntu linux 10.04,
ubuntu linux 11.10,
ubuntu linux 12.04,
ubuntu linux 12.10

References

Canonical

CVE-2013-0759 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0759)

Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html

http://rhn.redhat.com/errata/RHSA-2013-0145.html

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16827

USN-1681-4 (http://www.ubuntu.com/usn/USN-1681-4)

http://rhn.redhat.com/errata/RHSA-2013-0144.html

http://www.mozilla.org/security/announce/2013/mfsa2013-04.html

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html

USN-1681-1 (http://www.ubuntu.com/usn/USN-1681-1)

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html

USN-1681-2 (http://www.ubuntu.com/usn/USN-1681-2)

https://bugzilla.mozilla.org/show_bug.cgi?id=802026

Rapid7

Technical Analysis