CVE-2013-1670

EXPLOITED

Mozilla Firefox < 20.0.1 - XSS

Title source: rule

Description

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotemultiple

https://www.exploit-db.com/exploits/34363

View Code ZIP pw:eip

References (17)

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2013-0820.html

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2013-0821.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDVSA-2013:165

[Vendor Advisory] http://www.mozilla.org/security/announce/2013/mfsa2013-42.html

[Third Party Advisory, VDB Entry] http://www.osvdb.org/93427

[Vendor Advisory] http://www.ubuntu.com/usn/USN-1822-1

[Vendor Advisory] http://www.ubuntu.com/usn/USN-1823-1

[Issue Tracking] https://bugzilla.mozilla.org/show_bug.cgi?id=853709

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17046

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/59865

[Exploit, Third Party Advisory] http://www.exploit-db.com/exploits/34363

[Third Party Advisory] http://www.debian.org/security/2013/dsa-2699

Scores

EPSS 0.2456

EPSS Percentile 96.1%

Details

VulnCheck KEV 2017-01-09

CWE

CWE-79 CWE-264

Status published

Products (24)

mozilla/firefox < 20.0.1

mozilla/firefox

mozilla/firefox

mozilla/firefox

mozilla/firefox

mozilla/firefox

mozilla/firefox

mozilla/firefox

mozilla/firefox

mozilla/firefox

... and 14 more

Published May 16, 2013

Tracked Since Feb 18, 2026