What’s Vulnerable › Vulnerabilities

CVE-2013-0797

• Severity: medium (CVSS 6.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-04-03 · updated 2026-06-16

Description

Untrusted search path vulnerability in the Mozilla Updater in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 allows local users to gain privileges via a Trojan horse DLL file in an unspecified directory.

Affected products

• Mozilla Firefox: through 19.0.2; 19.0, 19.0.1, 17.0, 17.0.1, 17.0.2, 17.0.3 (+1)
• Mozilla Seamonkey: through 2.17; 2.0, 2.0-alpha_1, 2.0-alpha_2, 2.0-alpha_3, 2.0-beta_1, 2.0-beta_2 (+128)
• Mozilla Thunderbird: 17.0, 17.0.1, 17.0.2, 17.0.3, 17.0.4
• Mozilla Thunderbird ESR: 17.0, 17.0.1, 17.0.2, 17.0.3, 17.0.4

References

• http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html
• http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html
• http://www.mozilla.org/security/announce/2013/mfsa2013-34.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=830134
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17146
• http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html
• http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html
• http://www.mozilla.org/security/announce/2013/mfsa2013-34.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=830134
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17146

Get alerted when CVE-2013-0797 or the next vulnerability affects your stack