Description
Buffer overflow in the Mozilla Maintenance Service in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, and Thunderbird ESR 17.x before 17.0.5 on Windows allows local users to gain privileges via crafted arguments.
References (5)
Core 5
Core References
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17155
Vendor Advisory x_refsource_confirm
http://www.mozilla.org/security/announce/2013/mfsa2013-32.html
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=848417
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html
Scores
EPSS
0.0039
EPSS Percentile
30.9%
Details
CWE
CWE-119
Status
published
Products (18)
mozilla/firefox
19.0
mozilla/firefox
19.0.1
mozilla/firefox
17.0
mozilla/firefox
17.0.1
mozilla/firefox
17.0.2
mozilla/firefox
17.0.3
mozilla/firefox
17.0.4
mozilla/firefox
< 19.0.2
mozilla/thunderbird
17.0
mozilla/thunderbird
17.0.1
... and 8 more
Published
Apr 03, 2013
Tracked Since
Feb 18, 2026