{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Mozilla Firefox versions ant\u00e9rieures \u00e0 23.0",
      "product": {
        "name": "Firefox",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Mozilla Seamonkey versions ant\u00e9rieures \u00e0 2.20",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Mozilla Firefox ESR versions ant\u00e9rieures \u00e0 17.0.8",
      "product": {
        "name": "Firefox ESR",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Mozilla Thunderbird versions ant\u00e9rieures \u00e0 17.0.8",
      "product": {
        "name": "Thunderbird",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Mozilla Thunderbird ESR versions ant\u00e9rieures \u00e0 17.0.8",
      "product": {
        "name": "Thunderbird",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2013-1713",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1713"
    },
    {
      "name": "CVE-2013-1707",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1707"
    },
    {
      "name": "CVE-2013-1708",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1708"
    },
    {
      "name": "CVE-2013-1704",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1704"
    },
    {
      "name": "CVE-2013-1710",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1710"
    },
    {
      "name": "CVE-2013-1705",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1705"
    },
    {
      "name": "CVE-2013-1709",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1709"
    },
    {
      "name": "CVE-2013-1706",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1706"
    },
    {
      "name": "CVE-2013-1715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1715"
    },
    {
      "name": "CVE-2013-1701",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1701"
    },
    {
      "name": "CVE-2013-1714",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1714"
    },
    {
      "name": "CVE-2013-1702",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1702"
    },
    {
      "name": "CVE-2013-1712",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1712"
    },
    {
      "name": "CVE-2013-1711",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1711"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-66",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-66.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-75",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-75.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-69",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-69.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-74",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-74.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-73",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-73.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-71",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-71.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-65",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-65.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-72",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-72.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-64",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-64.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-67",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-67.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-63",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-63.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-68",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-68.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-70",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-70.html"
    }
  ],
  "reference": "CERTA-2013-AVI-463",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2013-08-07T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans des produits \u003cspan\nclass=\"textit\"\u003eMozilla\u003c/span\u003e. Certaines d\u0027entre elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un\nd\u00e9ni de service \u00e0 distance et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans des produits Mozilla",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Mozilla du 06 ao\u00fbt 2013",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Mozilla Firefox versions ant\u00e9rieures \u00e0 23.0",
      "product": {
        "name": "Firefox",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Mozilla Seamonkey versions ant\u00e9rieures \u00e0 2.20",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Mozilla Firefox ESR versions ant\u00e9rieures \u00e0 17.0.8",
      "product": {
        "name": "Firefox ESR",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Mozilla Thunderbird versions ant\u00e9rieures \u00e0 17.0.8",
      "product": {
        "name": "Thunderbird",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Mozilla Thunderbird ESR versions ant\u00e9rieures \u00e0 17.0.8",
      "product": {
        "name": "Thunderbird",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2013-1713",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1713"
    },
    {
      "name": "CVE-2013-1707",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1707"
    },
    {
      "name": "CVE-2013-1708",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1708"
    },
    {
      "name": "CVE-2013-1704",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1704"
    },
    {
      "name": "CVE-2013-1710",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1710"
    },
    {
      "name": "CVE-2013-1705",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1705"
    },
    {
      "name": "CVE-2013-1709",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1709"
    },
    {
      "name": "CVE-2013-1706",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1706"
    },
    {
      "name": "CVE-2013-1715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1715"
    },
    {
      "name": "CVE-2013-1701",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1701"
    },
    {
      "name": "CVE-2013-1714",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1714"
    },
    {
      "name": "CVE-2013-1702",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1702"
    },
    {
      "name": "CVE-2013-1712",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1712"
    },
    {
      "name": "CVE-2013-1711",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1711"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-66",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-66.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-75",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-75.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-69",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-69.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-74",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-74.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-73",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-73.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-71",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-71.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-65",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-65.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-72",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-72.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-64",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-64.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-67",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-67.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-63",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-63.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-68",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-68.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MFSA 2013-70",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-70.html"
    }
  ],
  "reference": "CERTA-2013-AVI-463",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2013-08-07T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans des produits \u003cspan\nclass=\"textit\"\u003eMozilla\u003c/span\u003e. Certaines d\u0027entre elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un\nd\u00e9ni de service \u00e0 distance et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans des produits Mozilla",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Mozilla du 06 ao\u00fbt 2013",
      "url": null
    }
  ]
}

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "security@mozilla.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "47AF449C-4766-4BBB-928A-F6437F083835",
              "versionEndIncluding": "22.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:17.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "3283FBAC-B77A-4C62-9D51-70BB35FA3D13",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:17.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "886D8A1F-ECDD-4FE9-A4E5-2322EEC0B880",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:17.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "E10B8803-C319-4AAA-81CF-FA206A33BA55",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:17.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "E2B5567C-8969-456D-B6DF-3562B99C41FE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:17.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "5657779C-19F9-42B8-BBBD-292B898E8FD2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:17.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "EEA3B9F4-BD8E-488B-A362-0B86BC6DA275",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:17.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A91BD4A-76BD-40B9-9E12-22CACAAE42BF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:17.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "84CEB297-BEE9-4BBC-BA91-6AF14DCCA87C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:19.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "06FF9DFE-491D-4260-8A49-07FD342B9412",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:19.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "DE09D089-7F48-466B-B03A-C64152A12615",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:19.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "653D73DA-21C0-4C3F-9269-5A6D5C5B1E34",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:20.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "804A0ACE-EB28-413D-93F4-E849FEA01390",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:20.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "3BA49C6F-9115-41A5-BBDE-743CB9DEDDA8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:21.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "7CC8D9A8-D4DB-4BC9-89CE-F3AF742C399F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "56C0A9C0-65CF-4ABC-836F-AC52ED5C93A8",
              "versionEndIncluding": "17.0.7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:thunderbird:17.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C2FD78A8-0D3A-412C-8776-20C598697564",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:thunderbird:17.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "777D8DC5-8D43-4842-B0A7-3C933F41F6E8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:thunderbird:17.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "808C66D2-4C53-4544-AD21-443D9A400B84",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:thunderbird:17.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "6FB95E8B-CF01-471F-8306-BB9FB0896904",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:thunderbird:17.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "AF7E092E-BCBE-48B4-8F6A-D3E4A0369AE1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:thunderbird:17.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB1D90B0-9E81-4828-8122-A66FB0953863",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:thunderbird:17.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F3920CE-A546-4E95-9E00-46DE4C732F73",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "341D94CE-C0EB-47FA-A043-E7B0F4344BBB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "84C3EE07-F201-451A-89A1-A41B8B2165E6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "45837B42-7D29-4475-94F1-E29CD5831C7F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "7028A433-7D1B-4C6F-A0F6-1B69682F7853",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "86C07513-8F98-4FA6-837D-7D735AE5EA91",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "E1D87C70-0EC2-49DE-A59D-CAF22760BC9D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "61AE2EAA-55A4-4FC9-BC3F-0FEE5BB2DE99",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "DCC56C1D-6F46-4B08-B085-E9E0D41DB8CA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D56B932B-9593-44E2-B610-E4EB2143EB21",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*",
              "matchCriteriaId": "DE8E7D74-0DCB-4633-B502-EDC2112229BA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*",
              "matchCriteriaId": "9DAA2E6F-A666-4136-8F6B-E35C313CAB2B",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*",
              "matchCriteriaId": "36559BC0-44D7-48B3-86FF-1BFF0257B5ED",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8 on Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012 allow local users to gain privileges via a Trojan horse DLL in (1) the update directory or (2) the current working directory."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples vulnerabilidades de path de b\u00fasqueda inseguro en updater.exe en Mozilla Firefox anterior a v23.0, Firefox ESR v17.x anterior a v 17.0.8, Thunderbird anterior a v 17.0.8, Thunderbird ESR v17.x anterior a v 17.0.8 en  Windows 7, Windows Server 2008 R2, Windows 8, y Windows Server 2012 permiten a los usuarios locales conseguir privilegios a trav\u00e9s de una DLL caballo de Troya en (1) el directorio de actualizaci\u00f3n o (2) el directorio de trabajo actual."
    }
  ],
  "evaluatorComment": "Per: http://cwe.mitre.org/data/definitions/426.html\n\nCWE-426: Untrusted Search Path",
  "id": "CVE-2013-1712",
  "lastModified": "2026-06-16T23:51:58.297",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 6.9,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.4,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2013-08-07T01:55:04.917",
  "references": [
    {
      "source": "security@mozilla.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-71.html"
    },
    {
      "source": "security@mozilla.org",
      "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=859072"
    },
    {
      "source": "security@mozilla.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18014"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-71.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=859072"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18014"
    }
  ],
  "sourceIdentifier": "security@mozilla.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2013-1712"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2013-08-07T01:55:00Z",
    "severity": "MODERATE"
  },
  "details": "Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8 on Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012 allow local users to gain privileges via a Trojan horse DLL in (1) the update directory or (2) the current working directory.",
  "id": "GHSA-vrw2-q2cc-chx3",
  "modified": "2022-05-17T00:55:54Z",
  "published": "2022-05-17T00:55:54Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1712"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=859072"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18014"
    },
    {
      "type": "WEB",
      "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-71.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "GSD": {
    "alias": "CVE-2013-1712",
    "description": "Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8 on Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012 allow local users to gain privileges via a Trojan horse DLL in (1) the update directory or (2) the current working directory.",
    "id": "GSD-2013-1712",
    "references": [
      "https://www.suse.com/security/cve/CVE-2013-1712.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2013-1712"
      ],
      "details": "Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8 on Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012 allow local users to gain privileges via a Trojan horse DLL in (1) the update directory or (2) the current working directory.",
      "id": "GSD-2013-1712",
      "modified": "2023-12-13T01:22:20.231192Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@mozilla.org",
        "ID": "CVE-2013-1712",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8 on Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012 allow local users to gain privileges via a Trojan horse DLL in (1) the update directory or (2) the current working directory."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "oval:org.mitre.oval:def:18014",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18014"
          },
          {
            "name": "http://www.mozilla.org/security/announce/2013/mfsa2013-71.html",
            "refsource": "CONFIRM",
            "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-71.html"
          },
          {
            "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=859072",
            "refsource": "CONFIRM",
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=859072"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.7:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.6:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:firefox_esr:17.0.7:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:firefox_esr:17.0.6:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndIncluding": "17.0.7",
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndIncluding": "22.0",
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:firefox:19.0:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:thunderbird_esr:17.0:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.1:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:firefox_esr:17.0.2:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:firefox_esr:17.0.1:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:thunderbird:17.0.2:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:thunderbird:17.0:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:thunderbird:17.0.1:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:firefox:19.0.1:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:firefox:19.0.2:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.2:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.3:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:firefox_esr:17.0:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:firefox_esr:17.0.3:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:thunderbird:17.0.3:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:thunderbird:17.0.4:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:firefox:20.0:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:firefox:20.0.1:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.4:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.5:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:firefox_esr:17.0.4:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:firefox_esr:17.0.5:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:thunderbird:17.0.5:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:thunderbird:17.0.6:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:firefox:21.0:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2013-1712"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8 on Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012 allow local users to gain privileges via a Trojan horse DLL in (1) the update directory or (2) the current working directory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=859072",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=859072"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2013/mfsa2013-71.html",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-71.html"
            },
            {
              "name": "oval:org.mitre.oval:def:18014",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18014"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.9,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.4,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-09-19T01:36Z",
      "publishedDate": "2013-08-07T01:55Z"
    }
  }
}