1. Home
  2. Vulnerabilities
  3. CVE-2013-1717

CVE-2013-1717

CVSS v2.0 5.4 (Medium)
54% Progress
EPSS 0.83 % (82th)
0.83% Progress
Affected Products 5
Advisories 12
Info CVSS EPSS Affected Configurations References Security Advisories Packages & Software OVAL Tools, Exploits & PoC Graph Web & Social Timeline

Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly restrict local-filesystem access by Java applets, which allows user-assisted remote attackers to read arbitrary files by leveraging a download to a fixed pathname or other predictable pathname.

Weaknesses
CWE-264
Permissions, Privileges, and Access Controls
CVE Status
PUBLISHED
CNA
Mozilla Corporation
Published Date
2013-08-07 01:55:05
(11 years ago)
Updated Date
2017-09-19 01:36:12
(7 years ago)

Affected Products

Mozilla

Configuration #1

    CPE23 From Up To
  Mozilla Thunderbird Esr 17.0 cpe:2.3:a:mozilla:thunderbird_esr:17.0
  Mozilla Thunderbird Esr 17.0.1 cpe:2.3:a:mozilla:thunderbird_esr:17.0.1
  Mozilla Thunderbird Esr 17.0.2 cpe:2.3:a:mozilla:thunderbird_esr:17.0.2
  Mozilla Thunderbird Esr 17.0.3 cpe:2.3:a:mozilla:thunderbird_esr:17.0.3
  Mozilla Thunderbird Esr 17.0.4 cpe:2.3:a:mozilla:thunderbird_esr:17.0.4
  Mozilla Thunderbird Esr 17.0.5 cpe:2.3:a:mozilla:thunderbird_esr:17.0.5
  Mozilla Thunderbird Esr 17.0.6 cpe:2.3:a:mozilla:thunderbird_esr:17.0.6
  Mozilla Thunderbird Esr 17.0.7 cpe:2.3:a:mozilla:thunderbird_esr:17.0.7

Configuration #2

    CPE23 From Up To
  Mozilla Firefox 22.0 and prior versions cpe:2.3:a:mozilla:firefox <= 22.0
  Mozilla Firefox 19.0 cpe:2.3:a:mozilla:firefox:19.0
  Mozilla Firefox 19.0.1 cpe:2.3:a:mozilla:firefox:19.0.1
  Mozilla Firefox 19.0.2 cpe:2.3:a:mozilla:firefox:19.0.2
  Mozilla Firefox 20.0 cpe:2.3:a:mozilla:firefox:20.0
  Mozilla Firefox 20.0.1 cpe:2.3:a:mozilla:firefox:20.0.1
  Mozilla Firefox 21.0 cpe:2.3:a:mozilla:firefox:21.0

Configuration #3

    CPE23 From Up To
  Mozilla Seamonkey Beta3 2.20 and prior versions cpe:2.3:a:mozilla:seamonkey::beta3 <= 2.20
  Mozilla Seamonkey 2.0 cpe:2.3:a:mozilla:seamonkey:2.0
  Mozilla Seamonkey 2.0 Alpha 1 cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1
  Mozilla Seamonkey 2.0 Alpha 2 cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2
  Mozilla Seamonkey 2.0 Alpha 3 cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3
  Mozilla Seamonkey 2.0 Beta 1 cpe:2.3:a:mozilla:seamonkey:2.0:beta_1
  Mozilla Seamonkey 2.0 Beta 2 cpe:2.3:a:mozilla:seamonkey:2.0:beta_2
  Mozilla Seamonkey 2.0 Rc1 cpe:2.3:a:mozilla:seamonkey:2.0:rc1
  Mozilla Seamonkey 2.0 Rc2 cpe:2.3:a:mozilla:seamonkey:2.0:rc2
  Mozilla Seamonkey 2.0.1 cpe:2.3:a:mozilla:seamonkey:2.0.1
  Mozilla Seamonkey 2.0.2 cpe:2.3:a:mozilla:seamonkey:2.0.2
  Mozilla Seamonkey 2.0.3 cpe:2.3:a:mozilla:seamonkey:2.0.3
  Mozilla Seamonkey 2.0.4 cpe:2.3:a:mozilla:seamonkey:2.0.4
  Mozilla Seamonkey 2.0.5 cpe:2.3:a:mozilla:seamonkey:2.0.5
  Mozilla Seamonkey 2.0.6 cpe:2.3:a:mozilla:seamonkey:2.0.6
  Mozilla Seamonkey 2.0.7 cpe:2.3:a:mozilla:seamonkey:2.0.7
  Mozilla Seamonkey 2.0.8 cpe:2.3:a:mozilla:seamonkey:2.0.8
  Mozilla Seamonkey 2.0.9 cpe:2.3:a:mozilla:seamonkey:2.0.9
  Mozilla Seamonkey 2.0.10 cpe:2.3:a:mozilla:seamonkey:2.0.10
  Mozilla Seamonkey 2.0.11 cpe:2.3:a:mozilla:seamonkey:2.0.11
  Mozilla Seamonkey 2.0.12 cpe:2.3:a:mozilla:seamonkey:2.0.12
  Mozilla Seamonkey 2.0.13 cpe:2.3:a:mozilla:seamonkey:2.0.13
  Mozilla Seamonkey 2.0.14 cpe:2.3:a:mozilla:seamonkey:2.0.14
  Mozilla Seamonkey 2.1 cpe:2.3:a:mozilla:seamonkey:2.1
  Mozilla Seamonkey 2.1 Alpha1 cpe:2.3:a:mozilla:seamonkey:2.1:alpha1
  Mozilla Seamonkey 2.1 Alpha2 cpe:2.3:a:mozilla:seamonkey:2.1:alpha2
  Mozilla Seamonkey 2.1 Alpha3 cpe:2.3:a:mozilla:seamonkey:2.1:alpha3
  Mozilla Seamonkey 2.1 Beta1 cpe:2.3:a:mozilla:seamonkey:2.1:beta1
  Mozilla Seamonkey 2.1 Beta2 cpe:2.3:a:mozilla:seamonkey:2.1:beta2
  Mozilla Seamonkey 2.1 Beta3 cpe:2.3:a:mozilla:seamonkey:2.1:beta3
  Mozilla Seamonkey 2.1 Rc1 cpe:2.3:a:mozilla:seamonkey:2.1:rc1
  Mozilla Seamonkey 2.1 Rc2 cpe:2.3:a:mozilla:seamonkey:2.1:rc2
  Mozilla Seamonkey 2.2 cpe:2.3:a:mozilla:seamonkey:2.2
  Mozilla Seamonkey 2.2 Beta1 cpe:2.3:a:mozilla:seamonkey:2.2:beta1
  Mozilla Seamonkey 2.2 Beta2 cpe:2.3:a:mozilla:seamonkey:2.2:beta2
  Mozilla Seamonkey 2.2 Beta3 cpe:2.3:a:mozilla:seamonkey:2.2:beta3
  Mozilla Seamonkey 2.3 cpe:2.3:a:mozilla:seamonkey:2.3
  Mozilla Seamonkey 2.3 Beta1 cpe:2.3:a:mozilla:seamonkey:2.3:beta1
  Mozilla Seamonkey 2.3 Beta2 cpe:2.3:a:mozilla:seamonkey:2.3:beta2
  Mozilla Seamonkey 2.3 Beta3 cpe:2.3:a:mozilla:seamonkey:2.3:beta3
  Mozilla Seamonkey 2.3.1 cpe:2.3:a:mozilla:seamonkey:2.3.1
  Mozilla Seamonkey 2.3.2 cpe:2.3:a:mozilla:seamonkey:2.3.2
  Mozilla Seamonkey 2.3.3 cpe:2.3:a:mozilla:seamonkey:2.3.3
  Mozilla Seamonkey 2.4 cpe:2.3:a:mozilla:seamonkey:2.4
  Mozilla Seamonkey 2.4 Beta1 cpe:2.3:a:mozilla:seamonkey:2.4:beta1
  Mozilla Seamonkey 2.4 Beta2 cpe:2.3:a:mozilla:seamonkey:2.4:beta2
  Mozilla Seamonkey 2.4 Beta3 cpe:2.3:a:mozilla:seamonkey:2.4:beta3
  Mozilla Seamonkey 2.4.1 cpe:2.3:a:mozilla:seamonkey:2.4.1
  Mozilla Seamonkey 2.5 cpe:2.3:a:mozilla:seamonkey:2.5
  Mozilla Seamonkey 2.5 Beta1 cpe:2.3:a:mozilla:seamonkey:2.5:beta1
  Mozilla Seamonkey 2.5 Beta2 cpe:2.3:a:mozilla:seamonkey:2.5:beta2
  Mozilla Seamonkey 2.5 Beta3 cpe:2.3:a:mozilla:seamonkey:2.5:beta3
  Mozilla Seamonkey 2.5 Beta4 cpe:2.3:a:mozilla:seamonkey:2.5:beta4
  Mozilla Seamonkey 2.6 cpe:2.3:a:mozilla:seamonkey:2.6
  Mozilla Seamonkey 2.6 Beta1 cpe:2.3:a:mozilla:seamonkey:2.6:beta1
  Mozilla Seamonkey 2.6 Beta2 cpe:2.3:a:mozilla:seamonkey:2.6:beta2
  Mozilla Seamonkey 2.6 Beta3 cpe:2.3:a:mozilla:seamonkey:2.6:beta3
  Mozilla Seamonkey 2.6 Beta4 cpe:2.3:a:mozilla:seamonkey:2.6:beta4
  Mozilla Seamonkey 2.6.1 cpe:2.3:a:mozilla:seamonkey:2.6.1
  Mozilla Seamonkey 2.7 cpe:2.3:a:mozilla:seamonkey:2.7
  Mozilla Seamonkey 2.7 Beta1 cpe:2.3:a:mozilla:seamonkey:2.7:beta1
  Mozilla Seamonkey 2.7 Beta2 cpe:2.3:a:mozilla:seamonkey:2.7:beta2
  Mozilla Seamonkey 2.7 Beta3 cpe:2.3:a:mozilla:seamonkey:2.7:beta3
  Mozilla Seamonkey 2.7 Beta4 cpe:2.3:a:mozilla:seamonkey:2.7:beta4
  Mozilla Seamonkey 2.7 Beta5 cpe:2.3:a:mozilla:seamonkey:2.7:beta5
  Mozilla Seamonkey 2.7.1 cpe:2.3:a:mozilla:seamonkey:2.7.1
  Mozilla Seamonkey 2.7.2 cpe:2.3:a:mozilla:seamonkey:2.7.2
  Mozilla Seamonkey 2.8 cpe:2.3:a:mozilla:seamonkey:2.8
  Mozilla Seamonkey 2.8 Beta1 cpe:2.3:a:mozilla:seamonkey:2.8:beta1
  Mozilla Seamonkey 2.8 Beta2 cpe:2.3:a:mozilla:seamonkey:2.8:beta2
  Mozilla Seamonkey 2.8 Beta3 cpe:2.3:a:mozilla:seamonkey:2.8:beta3
  Mozilla Seamonkey 2.8 Beta4 cpe:2.3:a:mozilla:seamonkey:2.8:beta4
  Mozilla Seamonkey 2.8 Beta5 cpe:2.3:a:mozilla:seamonkey:2.8:beta5
  Mozilla Seamonkey 2.8 Beta6 cpe:2.3:a:mozilla:seamonkey:2.8:beta6
  Mozilla Seamonkey 2.9 cpe:2.3:a:mozilla:seamonkey:2.9
  Mozilla Seamonkey 2.9 Beta1 cpe:2.3:a:mozilla:seamonkey:2.9:beta1
  Mozilla Seamonkey 2.9 Beta2 cpe:2.3:a:mozilla:seamonkey:2.9:beta2
  Mozilla Seamonkey 2.9 Beta3 cpe:2.3:a:mozilla:seamonkey:2.9:beta3
  Mozilla Seamonkey 2.9 Beta4 cpe:2.3:a:mozilla:seamonkey:2.9:beta4
  Mozilla Seamonkey 2.9.1 cpe:2.3:a:mozilla:seamonkey:2.9.1
  Mozilla Seamonkey 2.10 cpe:2.3:a:mozilla:seamonkey:2.10
  Mozilla Seamonkey 2.10 Beta1 cpe:2.3:a:mozilla:seamonkey:2.10:beta1
  Mozilla Seamonkey 2.10 Beta2 cpe:2.3:a:mozilla:seamonkey:2.10:beta2
  Mozilla Seamonkey 2.10 Beta3 cpe:2.3:a:mozilla:seamonkey:2.10:beta3
  Mozilla Seamonkey 2.10.1 cpe:2.3:a:mozilla:seamonkey:2.10.1
  Mozilla Seamonkey 2.11 cpe:2.3:a:mozilla:seamonkey:2.11
  Mozilla Seamonkey 2.11 Beta1 cpe:2.3:a:mozilla:seamonkey:2.11:beta1
  Mozilla Seamonkey 2.11 Beta2 cpe:2.3:a:mozilla:seamonkey:2.11:beta2
  Mozilla Seamonkey 2.11 Beta3 cpe:2.3:a:mozilla:seamonkey:2.11:beta3
  Mozilla Seamonkey 2.11 Beta4 cpe:2.3:a:mozilla:seamonkey:2.11:beta4
  Mozilla Seamonkey 2.11 Beta5 cpe:2.3:a:mozilla:seamonkey:2.11:beta5
  Mozilla Seamonkey 2.11 Beta6 cpe:2.3:a:mozilla:seamonkey:2.11:beta6
  Mozilla Seamonkey 2.12 cpe:2.3:a:mozilla:seamonkey:2.12
  Mozilla Seamonkey 2.12 Beta1 cpe:2.3:a:mozilla:seamonkey:2.12:beta1
  Mozilla Seamonkey 2.12 Beta2 cpe:2.3:a:mozilla:seamonkey:2.12:beta2
  Mozilla Seamonkey 2.12 Beta3 cpe:2.3:a:mozilla:seamonkey:2.12:beta3
  Mozilla Seamonkey 2.12 Beta4 cpe:2.3:a:mozilla:seamonkey:2.12:beta4
  Mozilla Seamonkey 2.12 Beta5 cpe:2.3:a:mozilla:seamonkey:2.12:beta5
  Mozilla Seamonkey 2.12 Beta6 cpe:2.3:a:mozilla:seamonkey:2.12:beta6
  Mozilla Seamonkey 2.12.1 cpe:2.3:a:mozilla:seamonkey:2.12.1
  Mozilla Seamonkey 2.13 cpe:2.3:a:mozilla:seamonkey:2.13
  Mozilla Seamonkey 2.13 Beta1 cpe:2.3:a:mozilla:seamonkey:2.13:beta1
  Mozilla Seamonkey 2.13 Beta2 cpe:2.3:a:mozilla:seamonkey:2.13:beta2
  Mozilla Seamonkey 2.13 Beta3 cpe:2.3:a:mozilla:seamonkey:2.13:beta3
  Mozilla Seamonkey 2.13 Beta4 cpe:2.3:a:mozilla:seamonkey:2.13:beta4
  Mozilla Seamonkey 2.13 Beta5 cpe:2.3:a:mozilla:seamonkey:2.13:beta5
  Mozilla Seamonkey 2.13 Beta6 cpe:2.3:a:mozilla:seamonkey:2.13:beta6
  Mozilla Seamonkey 2.13.1 cpe:2.3:a:mozilla:seamonkey:2.13.1
  Mozilla Seamonkey 2.13.2 cpe:2.3:a:mozilla:seamonkey:2.13.2
  Mozilla Seamonkey 2.14 cpe:2.3:a:mozilla:seamonkey:2.14
  Mozilla Seamonkey 2.14 Beta1 cpe:2.3:a:mozilla:seamonkey:2.14:beta1
  Mozilla Seamonkey 2.14 Beta2 cpe:2.3:a:mozilla:seamonkey:2.14:beta2
  Mozilla Seamonkey 2.14 Beta3 cpe:2.3:a:mozilla:seamonkey:2.14:beta3
  Mozilla Seamonkey 2.14 Beta4 cpe:2.3:a:mozilla:seamonkey:2.14:beta4
  Mozilla Seamonkey 2.14 Beta5 cpe:2.3:a:mozilla:seamonkey:2.14:beta5
  Mozilla Seamonkey 2.15 cpe:2.3:a:mozilla:seamonkey:2.15
  Mozilla Seamonkey 2.15 Beta1 cpe:2.3:a:mozilla:seamonkey:2.15:beta1
  Mozilla Seamonkey 2.15 Beta2 cpe:2.3:a:mozilla:seamonkey:2.15:beta2
  Mozilla Seamonkey 2.15 Beta3 cpe:2.3:a:mozilla:seamonkey:2.15:beta3
  Mozilla Seamonkey 2.15 Beta4 cpe:2.3:a:mozilla:seamonkey:2.15:beta4
  Mozilla Seamonkey 2.15 Beta5 cpe:2.3:a:mozilla:seamonkey:2.15:beta5
  Mozilla Seamonkey 2.15 Beta6 cpe:2.3:a:mozilla:seamonkey:2.15:beta6
  Mozilla Seamonkey 2.15.1 cpe:2.3:a:mozilla:seamonkey:2.15.1
  Mozilla Seamonkey 2.15.2 cpe:2.3:a:mozilla:seamonkey:2.15.2
  Mozilla Seamonkey 2.16 cpe:2.3:a:mozilla:seamonkey:2.16
  Mozilla Seamonkey 2.16 Beta1 cpe:2.3:a:mozilla:seamonkey:2.16:beta1
  Mozilla Seamonkey 2.16 Beta2 cpe:2.3:a:mozilla:seamonkey:2.16:beta2
  Mozilla Seamonkey 2.16 Beta3 cpe:2.3:a:mozilla:seamonkey:2.16:beta3
  Mozilla Seamonkey 2.16 Beta4 cpe:2.3:a:mozilla:seamonkey:2.16:beta4
  Mozilla Seamonkey 2.16 Beta5 cpe:2.3:a:mozilla:seamonkey:2.16:beta5
  Mozilla Seamonkey 2.16.1 cpe:2.3:a:mozilla:seamonkey:2.16.1
  Mozilla Seamonkey 2.16.2 cpe:2.3:a:mozilla:seamonkey:2.16.2
  Mozilla Seamonkey 2.17 cpe:2.3:a:mozilla:seamonkey:2.17
  Mozilla Seamonkey 2.17 Beta1 cpe:2.3:a:mozilla:seamonkey:2.17:beta1
  Mozilla Seamonkey 2.17 Beta2 cpe:2.3:a:mozilla:seamonkey:2.17:beta2
  Mozilla Seamonkey 2.17 Beta3 cpe:2.3:a:mozilla:seamonkey:2.17:beta3
  Mozilla Seamonkey 2.17 Beta4 cpe:2.3:a:mozilla:seamonkey:2.17:beta4
  Mozilla Seamonkey 2.17.1 cpe:2.3:a:mozilla:seamonkey:2.17.1
  Mozilla Seamonkey 2.18 Beta1 cpe:2.3:a:mozilla:seamonkey:2.18:beta1
  Mozilla Seamonkey 2.18 Beta2 cpe:2.3:a:mozilla:seamonkey:2.18:beta2
  Mozilla Seamonkey 2.18 Beta3 cpe:2.3:a:mozilla:seamonkey:2.18:beta3
  Mozilla Seamonkey 2.18 Beta4 cpe:2.3:a:mozilla:seamonkey:2.18:beta4
  Mozilla Seamonkey 2.19 cpe:2.3:a:mozilla:seamonkey:2.19
  Mozilla Seamonkey 2.19 Beta1 cpe:2.3:a:mozilla:seamonkey:2.19:beta1
  Mozilla Seamonkey 2.19 Beta2 cpe:2.3:a:mozilla:seamonkey:2.19:beta2
  Mozilla Seamonkey 2.20 Beta1 cpe:2.3:a:mozilla:seamonkey:2.20:beta1
  Mozilla Seamonkey 2.20 Beta2 cpe:2.3:a:mozilla:seamonkey:2.20:beta2

Configuration #4

    CPE23 From Up To
  Mozilla Firefox Esr 17.0 cpe:2.3:a:mozilla:firefox_esr:17.0
  Mozilla Firefox Esr 17.0.1 cpe:2.3:a:mozilla:firefox_esr:17.0.1
  Mozilla Firefox Esr 17.0.2 cpe:2.3:a:mozilla:firefox_esr:17.0.2
  Mozilla Firefox Esr 17.0.3 cpe:2.3:a:mozilla:firefox_esr:17.0.3
  Mozilla Firefox Esr 17.0.4 cpe:2.3:a:mozilla:firefox_esr:17.0.4
  Mozilla Firefox Esr 17.0.5 cpe:2.3:a:mozilla:firefox_esr:17.0.5
  Mozilla Firefox Esr 17.0.6 cpe:2.3:a:mozilla:firefox_esr:17.0.6
  Mozilla Firefox Esr 17.0.7 cpe:2.3:a:mozilla:firefox_esr:17.0.7

Configuration #5

    CPE23 From Up To
  Mozilla Thunderbird 17.0.7 and prior versions cpe:2.3:a:mozilla:thunderbird <= 17.0.7
  Mozilla Thunderbird 17.0 cpe:2.3:a:mozilla:thunderbird:17.0
  Mozilla Thunderbird 17.0.1 cpe:2.3:a:mozilla:thunderbird:17.0.1
  Mozilla Thunderbird 17.0.2 cpe:2.3:a:mozilla:thunderbird:17.0.2
  Mozilla Thunderbird 17.0.3 cpe:2.3:a:mozilla:thunderbird:17.0.3
  Mozilla Thunderbird 17.0.4 cpe:2.3:a:mozilla:thunderbird:17.0.4
  Mozilla Thunderbird 17.0.5 cpe:2.3:a:mozilla:thunderbird:17.0.5
  Mozilla Thunderbird 17.0.6 cpe:2.3:a:mozilla:thunderbird:17.0.6