Vulnerability CVE-2013-1712

Vulnerability Name:

CVE-2013-1712 (CCN-86283)

Assigned:

2013-08-06

Published:

2013-08-06

Updated:

2017-09-19

Summary:

Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8 on Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012 allow local users to gain privileges via a Trojan horse DLL in (1) the update directory or (2) the current working directory.
Per: http://cwe.mitre.org/data/definitions/426.html

CWE-426: Untrusted Search Path

CVSS v3 Severity:

9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

6.9 Medium (CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C)
5.1 Medium (Temporal CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

7.2 High (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
5.3 Medium (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

CWE-Other

Vulnerability Consequences:

Gain Privileges

References:

Source: MITRE
Type: CNA
CVE-2013-1712

Source: CCN
Type: SA54380
Cyberfox Multiple Vulnerabilities

Source: CCN
Type: SA54413
Mozilla Firefox ESR / Thunderbird / SeaMonkey Multiple Vulnerabilities

Source: CCN
Type: SA54418
Mozilla Firefox Multiple Vulnerabilities

Source: CCN
Type: SA54500
Pale Moon Multiple Vulnerabilities

Source: CCN
Type: MFSA 2013-71
Further Privilege escalation through Mozilla Updater

Source: CONFIRM
Type: Vendor Advisory
http://www.mozilla.org/security/announce/2013/mfsa2013-71.html

Source: CCN
Type: Pale Moon Web site
Release notes

Source: CCN
Type: BID-61878
Mozilla Firefox/Thunderbird/SeaMonkey CVE-2013-1712 Local Privilege Escalation Vulnerability

Source: CCN
Type: 8pecxstudios Web site
Cyberfox 23.0.0

Source: CONFIRM
Type: UNKNOWN
https://bugzilla.mozilla.org/show_bug.cgi?id=859072

Source: XF
Type: UNKNOWN
firefox-cve20131712-priv-esc(86283)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:18014

Vulnerable Configuration:

Configuration 1:

cpe:/a:mozilla:firefox:19.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:19.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:19.0.2:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:20.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:20.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:21.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:*:*:*:*:*:*:*:* (Version <= 22.0)

OR cpe:/a:mozilla:firefox_esr:17.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox_esr:17.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox_esr:17.0.2:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox_esr:17.0.3:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox_esr:17.0.4:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox_esr:17.0.5:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox_esr:17.0.6:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox_esr:17.0.7:*:*:*:*:*:*:*

OR cpe:/a:mozilla:thunderbird:17.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:thunderbird:17.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:thunderbird:17.0.2:*:*:*:*:*:*:*

OR cpe:/a:mozilla:thunderbird:17.0.3:*:*:*:*:*:*:*

OR cpe:/a:mozilla:thunderbird:17.0.4:*:*:*:*:*:*:*

OR cpe:/a:mozilla:thunderbird:17.0.5:*:*:*:*:*:*:*

OR cpe:/a:mozilla:thunderbird:17.0.6:*:*:*:*:*:*:*

OR cpe:/a:mozilla:thunderbird:*:*:*:*:*:*:*:* (Version <= 17.0.7)

OR cpe:/a:mozilla:thunderbird_esr:17.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:thunderbird_esr:17.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:thunderbird_esr:17.0.2:*:*:*:*:*:*:*

OR cpe:/a:mozilla:thunderbird_esr:17.0.3:*:*:*:*:*:*:*

OR cpe:/a:mozilla:thunderbird_esr:17.0.4:*:*:*:*:*:*:*

OR cpe:/a:mozilla:thunderbird_esr:17.0.5:*:*:*:*:*:*:*

OR cpe:/a:mozilla:thunderbird_esr:17.0.6:*:*:*:*:*:*:*

OR cpe:/a:mozilla:thunderbird_esr:17.0.7:*:*:*:*:*:*:*

AND

cpe:/o:microsoft:windows_7:*:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_8:-:*:*:*:pro_n:*:x64:*

OR cpe:/o:microsoft:windows_8:-:*:*:*:pro_n:*:x86:*

OR cpe:/o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:mozilla:thunderbird_esr:17.0.7:*:*:*:*:*:*:*

OR cpe:/a:mozilla:thunderbird:17.0.7:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:22.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox_esr:17.0.7:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20131712	V	CVE-2013-1712	2022-05-20
oval:org.mitre.oval:def:25591	P	SUSE-SU-2013:1325-2 -- Security update for Mozilla Firefox	2015-03-16
oval:org.mitre.oval:def:18014	V	Further Privilege escalation through Mozilla Updater	2014-10-06
oval:org.mitre.oval:def:24995	P	SUSE-SU-2013:1382-1 -- Security update for Mozilla Firefox	2014-09-08
oval:org.mitre.oval:def:25646	P	SUSE-SU-2013:1325-1 -- Security update for Mozilla Firefox	2014-09-08

BACK