CVE-2013-0773: Critical severity firefox vulnerability
The Chrome Object Wrapper (COW) and System Only Wrapper (SOW) implementations in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent modifications to a prototype, which allows remote attackers to obtain sensitive information from chrome objects or possibly execute arbitrary JavaScript code with chrome privileges via a crafted web site.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0773?
CVE-2013-0773 is classified as a moderate severity vulnerability.
How do I fix CVE-2013-0773?
To fix CVE-2013-0773, update your browser or email client to the latest version available that addresses this vulnerability.
Which versions of software are affected by CVE-2013-0773?
CVE-2013-0773 affects Mozilla Firefox versions prior to 19.0, Firefox ESR versions prior to 17.0.3, Thunderbird versions prior to 17.0.3, and other related software like SeaMonkey.
What type of vulnerability is CVE-2013-0773?
CVE-2013-0773 is a prototype pollution vulnerability that can allow remote attackers to modify the prototype.
Can CVE-2013-0773 be exploited remotely?
Yes, CVE-2013-0773 can be exploited remotely, allowing attackers to potentially manipulate the behavior of affected applications.