CVE-2013-1713 Details
Description
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks or install arbitrary add-ons via a crafted web site.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-264 | Permissions, Privileges, and Access Controls | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| mozilla firefox | <= 22.0 19.0 19.0.1 19.0.2 20.0 20.0.1 21.0 17.0 17.0.1 17.0.2 17.0.3 17.0.4 17.0.5 17.0.6 17.0.7 |
CPE
Remediation
| |
| mozilla seamonkey | <= 2.20 2.0 2.0 alpha_1 2.0 alpha_2 2.0 alpha_3 2.0 beta_1 2.0 beta_2 2.0 rc1 2.0 rc2 2.0.1 2.0.2 2.0.3 2.0.4 2.0.5 2.0.6 2.0.7 2.0.8 2.0.9 2.0.10 2.0.11 2.0.12 2.0.13 2.0.14 2.1 2.1 alpha1 2.1 alpha2 2.1 alpha3 2.1 beta1 2.1 beta2 2.1 beta3 2.1 rc1 2.1 rc2 2.2 2.2 beta1 2.2 beta2 2.2 beta3 2.3 2.3 beta1 2.3 beta2 2.3 beta3 2.3.1 2.3.2 2.3.3 2.4 2.4 beta1 2.4 beta2 2.4 beta3 2.4.1 2.5 2.5 beta1 2.5 beta2 2.5 beta3 2.5 beta4 2.6 2.6 beta1 2.6 beta2 2.6 beta3 2.6 beta4 2.6.1 2.7 2.7 beta1 2.7 beta2 2.7 beta3 2.7 beta4 2.7 beta5 2.7.1 2.7.2 2.8 2.8 beta1 2.8 beta2 2.8 beta3 2.8 beta4 2.8 beta5 2.8 beta6 2.9 2.9 beta1 2.9 beta2 2.9 beta3 2.9 beta4 2.9.1 2.10 2.10 beta1 2.10 beta2 2.10 beta3 2.10.1 2.11 2.11 beta1 2.11 beta2 2.11 beta3 2.11 beta4 2.11 beta5 2.11 beta6 2.12 2.12 beta1 2.12 beta2 2.12 beta3 2.12 beta4 2.12 beta5 2.12 beta6 2.12.1 2.13 2.13 beta1 2.13 beta2 2.13 beta3 2.13 beta4 2.13 beta5 2.13 beta6 2.13.1 2.13.2 2.14 2.14 beta1 2.14 beta2 2.14 beta3 2.14 beta4 2.14 beta5 2.15 2.15 beta1 2.15 beta2 2.15 beta3 2.15 beta4 2.15 beta5 2.15 beta6 2.15.1 2.15.2 2.16 2.16 beta1 2.16 beta2 2.16 beta3 2.16 beta4 2.16 beta5 2.16.1 2.16.2 2.17 2.17 beta1 2.17 beta2 2.17 beta3 2.17 beta4 2.17.1 2.18 beta1 2.18 beta2 2.18 beta3 2.18 beta4 2.19 2.19 beta1 2.19 beta2 2.20 beta1 2.20 beta2 |
CPE
Remediation
| |
| mozilla thunderbird | <= 17.0.7 17.0 17.0.1 17.0.2 17.0.3 17.0.4 17.0.5 17.0.6 |
CPE
Remediation
| |
| mozilla thunderbird esr | 17.0 17.0.1 17.0.2 17.0.3 17.0.4 17.0.5 17.0.6 17.0.7 |
CPE
Remediation
| |
Change History
15 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 16, 2026 | CVE Modified | [email protected] |
| Apr 29, 2026 | Status Change | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| Oct 21, 2024 | CPE Deprecation Remap | [email protected] |
| May 14, 2024 | CVE Modified | [email protected] |
| Sep 19, 2017 | CVE Modified | [email protected] |
| Jan 7, 2017 | CVE Modified | [email protected] |
| Aug 7, 2013 | Initial Analysis | [email protected] |