CVE catalog

CVE-2013-0795

icedove - several

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
3.43% · Oct 25, 2026

The System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 does not prevent use of the cloneNode method for cloning a protected node, which allows remote attackers to bypass the Same Origin Policy or possibly execute arbitrary JavaScript code with chrome privileges via a crafted web site.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianiceweasel710.0.12esr-1vulnerable
Debianiceweasel710.0.12esr-1+alphavulnerable
Debianiceweasel710.0.12esr-1+nmu1vulnerable
Debianiceweasel710.0.12esr-1+nmu1+alphavulnerable
Debianiceweasel711.0-1vulnerable
Debianiceweasel711.0-2vulnerable
Debianiceweasel711.0-3vulnerable
Debianiceweasel711.0-4vulnerable
Debianiceweasel711.0~b1-1vulnerable
Debianiceweasel711.0~b1-2vulnerable
Debianiceweasel711.0~b2-1vulnerable
Debianiceweasel711.0~b3-1vulnerable
Debianiceweasel711.0~b4-1vulnerable
Debianiceweasel711.0~b5-1vulnerable
Debianiceweasel711.0~b6-1vulnerable
Debianiceweasel712.0-1vulnerable
Debianiceweasel712.0-2vulnerable
Debianiceweasel712.0-3vulnerable
Debianiceweasel712.0-4vulnerable
Debianiceweasel712.0-5vulnerable
Debianiceweasel712.0-6vulnerable
Debianiceweasel712.0-7vulnerable
Debianiceweasel713.0-1vulnerable
Debianiceweasel713.0.1-1vulnerable
Debianiceweasel713.0.1-2vulnerable
Debianiceweasel714.0.1-1vulnerable
Debianiceweasel714.0.1-2vulnerable
Debianiceweasel715.0-1vulnerable
Debianiceweasel715.0.1-1vulnerable
Debianiceweasel716.0-1vulnerable
Debianiceweasel716.0.1-1vulnerable
Debianiceweasel716.0.2-1vulnerable
Debianiceweasel717.0-1vulnerable
Debianiceweasel717.0.1-1vulnerable
Debianiceweasel717.0.1-2vulnerable
Debianiceweasel717.0.5esr-1vulnerable
Debianiceweasel717.0.6esr-1~deb7u1fixed
Debianicedove710.0.12-1vulnerable
Debianicedove711.0-1vulnerable
Debianicedove716.0.2-1vulnerable
Debianicedove717.0-1vulnerable
Debianicedove717.0.2-1vulnerable
Debianicedove717.0.4-1vulnerable
Debianicedove717.0.5-1vulnerable
Debianicedove717.0.5-2vulnerable
Debianicedove717.0.7-1~deb7u1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianiceweaseldeb717.0.6esr-1~deb7u1Not reportedDSA-2699-1Not reported
Debianicedovedeb717.0.7-1~deb7u1Not reportedDSA-2720-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]