CVE-2013-0759: Medium severity firefox vulnerability
Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to spoof the address bar via vectors involving authentication information in the userinfo field of a URL, in conjunction with a 204 (aka No Content) HTTP status code.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0759?
CVE-2013-0759 is classified as a moderate severity vulnerability due to its ability to spoof the address bar in affected applications.
How do I fix CVE-2013-0759?
To fix CVE-2013-0759, upgrade your Mozilla Firefox, Thunderbird, or SeaMonkey to the latest version that addresses this vulnerability.
Which software is affected by CVE-2013-0759?
CVE-2013-0759 affects Mozilla Firefox versions before 18.0, Firefox ESR versions before 10.0.12 and 17.0.2, Thunderbird versions before 17.0.2, and SeaMonkey versions before 2.15.
What kind of attacks can exploit CVE-2013-0759?
CVE-2013-0759 can be exploited by remote attackers to spoof the address bar by using specific authentication information.
Is CVE-2013-0759 patched in current software versions?
Yes, CVE-2013-0759 has been patched in subsequent releases of Mozilla Firefox, Thunderbird, and SeaMonkey.