CVE-2013-0759
Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to spoof the address bar via vectors involving authentication information in the userinfo field of a URL, in conjunction with a 204 (aka No Content) HTTP status code.
- Affected products
- Centos, Firefox Esr, Firefox, Red Hat, Seamonkey, Suse, Thunderbird, Thunderbird Esr
- Mozilla Firefox
- < 18.0, 10.0.12, 17.0.2
- Mozilla Seamonkey
- < 2.15
- Mozilla Thunderbird
- < 17.0.2
- Mozilla Thunderbird Esr
- < 10.0.12, 17.0.2
- Fix
- Available
- CVSS 2.0
- 5.0 MEDIUM
- EPSS
- 2.3% (81th percentile)
- Weakness
- CWE-287
- NVD status
- Modified
- Published
- 2013-01-13
CVE-2013-0759 at NVD
No indexed exploits for CVE-2013-0759 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2013-0759 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.