Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-0738 State: PUBLISHED Published: 2020-01-30T13:34:50 Last Updated: 2024-08-06T14:33:05.654Z Vendors: Chamilo Products: Chamilo Problem Types: XSS Description: Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/58735 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83104
CVE ID: CVE-2013-0739 State: PUBLISHED Published: 2020-01-30T13:38:03 Last Updated: 2024-08-06T14:33:05.629Z Vendors: Chamilo Products: Chamilo Problem Types: XSS Description: Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/58735 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83105
CVE ID: CVE-2013-0740 State: PUBLISHED Published: 2014-04-10T19:00:00 Last Updated: 2024-08-06T14:33:05.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Dell OpenManage Server Administrator (OMSA) before 7.3.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the file parameter to HelpViewer. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/52742 - http://osvdb.org/95545 - http://www.securityfocus.com/bid/61383
CVE ID: CVE-2013-0741 State: PUBLISHED Published: 2013-11-15T20:00:00Z Last Updated: 2024-09-16T19:52:34.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in imagegen.ashx in Percipient Studios ImageGen before 2.9.0 for Umbraco CMS allows remote attackers to inject arbitrary web script or HTML via the font parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/99343 - http://secunia.com/advisories/52771 - http://our.umbraco.org/projects/website-utilities/imagegen
CVE ID: CVE-2013-0742 State: PUBLISHED Published: 2013-10-03T23:00:00Z Last Updated: 2024-09-17T00:56:38.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long ZIP directory entry name in an XPS file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/94933 - http://www.exploit-db.com/exploits/26805 - http://secunia.com/advisories/52707
CVE ID: CVE-2013-0743 State: REJECTED Published: 2013-01-25T18:00:00 Last Updated: 2017-11-29T18:57:01 Description: No description available.
CVE ID: CVE-2013-0744 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:33:05.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the TableBackgroundPainter::TableBackgroundData::Destroy function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an HTML document with a table containing many columns and column groups. Additional Analyst Notes: - CVE Program Container: R
ML document with a table containing many columns and column groups. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17007 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://rhn.redhat.com/errata/RHSA-2013-0145.html - http://www.ubuntu.com/usn/USN-1681-4 - http://rhn.redhat.com/errata/RHSA-2013-0144.html - https://bugzilla.mozilla.org/show_bug.cgi?id=814713 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://
p://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://www.mozilla.org/security/announce/2013/mfsa2013-05.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu.com/usn/USN-1681-2
CVE ID: CVE-2013-0745 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:33:05.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AutoWrapperChanger class in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not properly interact with garbage collection, which allows remote attackers to execute arbitrary code via a crafted HTML document referencing JavaScript objects. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - https://bugzilla.mozilla.org/show_bug.cg
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - https://bugzilla.mozilla.org/show_bug.cgi?id=794158 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://www.ubuntu.com/usn/USN-1681-4 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.mozilla.org/security/announce/2013/mfsa2013-08.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17061 - http://www.ubuntu.com/usn/USN-1681-2
CVE ID: CVE-2013-0746 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:33:05.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 do not properly implement quickstubs that use the jsval data type for their return values, which allows remote attackers to execute arbitrary code or cause a denial of service (compartment mismatch and application crash) via crafted JavaScript code that is not properly handled during garbage collection. Additional Analyst Notes: - C
crash) via crafted JavaScript code that is not properly handled during garbage collection. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - https://bugzilla.mozilla.org/show_bug.cgi?id=816842 - http://rhn.redhat.com/errata/RHSA-2013-0145.html - http://www.ubuntu.com/usn/USN-1681-4 - http://rhn.redhat.com/errata/RHSA-2013-0144.html - http://www.mozilla.org/security/announce/2013/mfsa2013-09.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.o
ts.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16570 - http://www.ubuntu.com/usn/USN-1681-2
CVE ID: CVE-2013-0747 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:33:05.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gPluginHandler.handleEvent function in the plugin handler in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not properly enforce the Same Origin Policy, which allows remote attackers to conduct clickjacking attacks via crafted JavaScript code that listens for a mutation event. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html -
es: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - https://bugzilla.mozilla.org/show_bug.cgi?id=733305 - http://www.mozilla.org/security/announce/2013/mfsa2013-10.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://www.ubuntu.com/usn/USN-1681-4 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16866 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu.com/usn/USN-1681-2
CVE ID: CVE-2013-0748 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:33:05.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XBL.__proto__.toString implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 makes it easier for remote attackers to bypass the ASLR protection mechanism by calling the toString function of an XBL object. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensu
ontainer: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://www.mozilla.org/security/announce/2013/mfsa2013-11.html - http://rhn.redhat.com/errata/RHSA-2013-0145.html - http://www.ubuntu.com/usn/USN-1681-4 - http://rhn.redhat.com/errata/RHSA-2013-0144.html - https://bugzilla.mozilla.org/show_bug.cgi?id=806031 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu.com/usn/USN-1681-2 - https://oval.cisecurity.org/re
opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu.com/usn/USN-1681-2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17109
CVE ID: CVE-2013-0749 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:33:05.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=808481 - https://bugzilla.mozilla.org/show_bug.cgi?id=816994
References: - https://bugzilla.mozilla.org/show_bug.cgi?id=808481 - https://bugzilla.mozilla.org/show_bug.cgi?id=816994 - https://bugzilla.mozilla.org/show_bug.cgi?id=814839 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://www.palemoon.org/releasenotes-ng.shtml - http://www.mozilla.org/security/announce/2013/mfsa2013-01.html - http://www.ubuntu.com/usn/USN-1681-4 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=805814 - https://bugzilla.mozilla.org/show_bug.cgi?id=81
m/usn/USN-1681-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=805814 - https://bugzilla.mozilla.org/show_bug.cgi?id=812847 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - https://bugzilla.mozilla.org/show_bug.cgi?id=794426 - https://bugzilla.mozilla.org/show_bug.cgi?id=785358 - https://bugzilla.mozilla.org/show_bug.cgi?id=805745 - http://www.ubuntu.com/usn/USN-1681-2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16953 - https://bugzilla.mozilla.org/show_bug.cgi?id=814407
CVE ID: CVE-2013-0750 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:33:05.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the JavaScript implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted string concatenation, leading to improper memory allocation and a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-
itional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16957 - http://rhn.redhat.com/errata/RHSA-2013-0145.html - http://www.ubuntu.com/usn/USN-1681-4 - http://rhn.redhat.com/errata/RHSA-2013-0144.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - https://bugzilla.mozilla.org/show_bug.cgi?id=805121 - h
.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - https://bugzilla.mozilla.org/show_bug.cgi?id=805121 - http://www.mozilla.org/security/announce/2013/mfsa2013-12.html - http://www.ubuntu.com/usn/USN-1681-2
CVE ID: CVE-2013-0751 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:33:05.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 18.0 on Android and SeaMonkey before 2.15 do not restrict a touch event to a single IFRAME element, which allows remote attackers to obtain sensitive information or possibly conduct cross-site scripting (XSS) attacks via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=790454 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg000
g/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16616 - http://www.mozilla.org/security/announce/2013/mfsa2013-06.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html
CVE ID: CVE-2013-0752 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:41:47.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XBL file with multiple bindings that have SVG content. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2013/mfsa2013-13.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%
y/announce/2013/mfsa2013-13.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16694 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://www.ubuntu.com/usn/USN-1681-4 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu.com/usn/USN-1681-2 - https://bugzilla.mozilla.org/show_bug.cgi?id=805024
CVE ID: CVE-2013-0753 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:41:47.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the serializeToStream implementation in the XMLSerializer component in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via crafted web content. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - https://oval.c
ram Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17053 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://rhn.redhat.com/errata/RHSA-2013-0145.html - http://www.ubuntu.com/usn/USN-1681-4 - http://rhn.redhat.com/errata/RHSA-2013-0144.html - http://www.mozilla.org/security/announce/2013/mfsa2013-16.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - https://bugzilla.mozill
om/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - https://bugzilla.mozilla.org/show_bug.cgi?id=814001 - http://www.ubuntu.com/usn/USN-1681-2
CVE ID: CVE-2013-0754 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:41:47.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the ListenerManager implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via vectors involving the triggering of garbage collection after memory allocation for listener objects. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/201
r objects. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2013/mfsa2013-17.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://rhn.redhat.com/errata/RHSA-2013-0145.html - http://www.ubuntu.com/usn/USN-1681-4 - http://rhn.redhat.com/errata/RHSA-2013-0144.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=814026 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu
/show_bug.cgi?id=814026 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu.com/usn/USN-1681-2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16812
CVE ID: CVE-2013-0755 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:41:47.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the mozVibrate implementation in the Vibrate library in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via vectors related to the domDoc pointer. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-0
nsuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://www.ubuntu.com/usn/USN-1681-4 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16952 - http://www.mozilla.org/security/announce/2013/mfsa2013-18.html - https://bugzilla.mozilla.org/show_bug.cgi?id=814027 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu.com/usn/USN-1681-2
CVE ID: CVE-2013-0756 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:41:47.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the obj_toSource function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted web page referencing JavaScript Proxy objects that are not properly handled during garbage collection. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists
ogram Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - https://bugzilla.mozilla.org/show_bug.cgi?id=814029 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17101 - http://www.ubuntu.com/usn/USN-1681-4 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu.com/usn/USN-1681-2 - http://www.mozilla.org/security/announce/2013/mfsa2013-19.html
CVE ID: CVE-2013-0757 State: PUBLISHED Published: 2013-01-13T20:00:00 Last Updated: 2024-08-06T14:41:47.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not prevent modifications to the prototype of an object, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by referencing Object.prototype.__proto__ in a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-a
document. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16939 - http://www.mozilla.org/security/announce/2013/mfsa2013-14.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html - http://www.ubuntu.com/usn/USN-1681-4 - https://bugzilla.mozilla.org/show_bug.cgi?id=813901 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html - http://www.ubuntu.com/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu.com/usn
/usn/USN-1681-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html - http://www.ubuntu.com/usn/USN-1681-2