CVE-2013-0794 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2013-0794

Deferred

More Info Official Page

Source-security@mozilla.org

Published At-03 Apr, 2013 | 11:56

Updated At-11 Apr, 2025 | 00:51

Mozilla Firefox before 20.0 and SeaMonkey before 2.17 do not prevent origin spoofing of tab-modal dialogs, which allows remote attackers to conduct phishing attacks via a crafted web site.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:N

CPE Matches

Mozilla Corporation

>>firefox>>Versions up to 19.0.2(inclusive)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>19.0

cpe:2.3:a:mozilla:firefox:19.0:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>19.0.1

cpe:2.3:a:mozilla:firefox:19.0.1:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>Versions up to 2.17(inclusive)

cpe:2.3:a:mozilla:seamonkey:*:beta4:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.1

cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.2

cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.3

cpe:2.3:a:mozilla:seamonkey:2.0.3:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.4

cpe:2.3:a:mozilla:seamonkey:2.0.4:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.5

cpe:2.3:a:mozilla:seamonkey:2.0.5:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.6

cpe:2.3:a:mozilla:seamonkey:2.0.6:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.7

cpe:2.3:a:mozilla:seamonkey:2.0.7:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.8

cpe:2.3:a:mozilla:seamonkey:2.0.8:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.9

cpe:2.3:a:mozilla:seamonkey:2.0.9:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.10

cpe:2.3:a:mozilla:seamonkey:2.0.10:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.11

cpe:2.3:a:mozilla:seamonkey:2.0.11:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.12

cpe:2.3:a:mozilla:seamonkey:2.0.12:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.13

cpe:2.3:a:mozilla:seamonkey:2.0.13:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0.14

cpe:2.3:a:mozilla:seamonkey:2.0.14:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.1

cpe:2.3:a:mozilla:seamonkey:2.1:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.1

cpe:2.3:a:mozilla:seamonkey:2.1:alpha1:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.1

cpe:2.3:a:mozilla:seamonkey:2.1:alpha2:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.1

cpe:2.3:a:mozilla:seamonkey:2.1:alpha3:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.1

cpe:2.3:a:mozilla:seamonkey:2.1:beta1:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.1

cpe:2.3:a:mozilla:seamonkey:2.1:beta2:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.1

cpe:2.3:a:mozilla:seamonkey:2.1:beta3:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.1

cpe:2.3:a:mozilla:seamonkey:2.1:rc1:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.1

cpe:2.3:a:mozilla:seamonkey:2.1:rc2:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.2

cpe:2.3:a:mozilla:seamonkey:2.2:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.2

cpe:2.3:a:mozilla:seamonkey:2.2:beta1:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.2

cpe:2.3:a:mozilla:seamonkey:2.2:beta2:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.2

cpe:2.3:a:mozilla:seamonkey:2.2:beta3:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.3

cpe:2.3:a:mozilla:seamonkey:2.3:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.3

cpe:2.3:a:mozilla:seamonkey:2.3:beta1:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.3

cpe:2.3:a:mozilla:seamonkey:2.3:beta2:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.3

cpe:2.3:a:mozilla:seamonkey:2.3:beta3:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.3.1

cpe:2.3:a:mozilla:seamonkey:2.3.1:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.3.2

cpe:2.3:a:mozilla:seamonkey:2.3.2:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.3.3

cpe:2.3:a:mozilla:seamonkey:2.3.3:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.4

cpe:2.3:a:mozilla:seamonkey:2.4:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.4

cpe:2.3:a:mozilla:seamonkey:2.4:beta1:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.4

cpe:2.3:a:mozilla:seamonkey:2.4:beta2:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.4

cpe:2.3:a:mozilla:seamonkey:2.4:beta3:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html	security@mozilla.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html	security@mozilla.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html	security@mozilla.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html	security@mozilla.org	N/A
http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html	security@mozilla.org	N/A
http://www.mozilla.org/security/announce/2013/mfsa2013-37.html	security@mozilla.org	Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=626775	security@mozilla.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17065	security@mozilla.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mozilla.org/security/announce/2013/mfsa2013-37.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=626775	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17065	af854a3a-2127-422b-91ae-364da2661108	N/A