CVE-2013-1712
Estado: ModificadaMedia (6.9)—
Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8 on Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012 allow local users to gain privileges via a Trojan horse DLL in (1) the update directory or (2) the current working directory.
CVSS
- Versión: 2.0
- Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
- Puntuación base: 6.9
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.39%
- Percentil entre todas las CVEs puntuadas: 30
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (3)
CWE
- NVD-CWE-Other
Referencias
- http://www.mozilla.org/security/announce/2013/mfsa2013-71.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=859072
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18014
- http://www.mozilla.org/security/announce/2013/mfsa2013-71.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=859072
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18014
JSON original (NVD)
Mostrar
{
"id": "CVE-2013-1712",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.9,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.4,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "security@mozilla.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2013-08-07T01:55:04.917",
"references": [
{
"url": "http://www.mozilla.org/security/announce/2013/mfsa2013-71.html",
"tags": [
"Vendor Advisory"
],
"source": "security@mozilla.org"
},
{
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=859072",
"source": "security@mozilla.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18014",
"source": "security@mozilla.org"
},
{
"url": "http://www.mozilla.org/security/announce/2013/mfsa2013-71.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=859072",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18014",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8 on Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012 allow local users to gain privileges via a Trojan horse DLL in (1) the update directory or (2) the current working directory."
},
{
"lang": "es",
"value": "Múltiples vulnerabilidades de path de búsqueda inseguro en updater.exe en Mozilla Firefox anterior a v23.0, Firefox ESR v17.x anterior a v 17.0.8, Thunderbird anterior a v 17.0.8, Thunderbird ESR v17.x anterior a v 17.0.8 en Windows 7, Windows Server 2008 R2, Windows 8, y Windows Server 2012 permiten a los usuarios locales conseguir privilegios a través de una DLL caballo de Troya en (1) el directorio de actualización o (2) el directorio de trabajo actual."
}
],
"lastModified": "2026-06-16T23:51:58.297",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47AF449C-4766-4BBB-928A-F6437F083835",
"versionEndIncluding": "22.0"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:17.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3283FBAC-B77A-4C62-9D51-70BB35FA3D13"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:17.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "886D8A1F-ECDD-4FE9-A4E5-2322EEC0B880"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:17.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E10B8803-C319-4AAA-81CF-FA206A33BA55"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:17.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2B5567C-8969-456D-B6DF-3562B99C41FE"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:17.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5657779C-19F9-42B8-BBBD-292B898E8FD2"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:17.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEA3B9F4-BD8E-488B-A362-0B86BC6DA275"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:17.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A91BD4A-76BD-40B9-9E12-22CACAAE42BF"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:17.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84CEB297-BEE9-4BBC-BA91-6AF14DCCA87C"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:19.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06FF9DFE-491D-4260-8A49-07FD342B9412"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:19.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE09D089-7F48-466B-B03A-C64152A12615"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:19.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "653D73DA-21C0-4C3F-9269-5A6D5C5B1E34"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:20.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "804A0ACE-EB28-413D-93F4-E849FEA01390"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:20.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BA49C6F-9115-41A5-BBDE-743CB9DEDDA8"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:21.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7CC8D9A8-D4DB-4BC9-89CE-F3AF742C399F"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56C0A9C0-65CF-4ABC-836F-AC52ED5C93A8",
"versionEndIncluding": "17.0.7"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird:17.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2FD78A8-0D3A-412C-8776-20C598697564"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird:17.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "777D8DC5-8D43-4842-B0A7-3C933F41F6E8"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird:17.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "808C66D2-4C53-4544-AD21-443D9A400B84"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird:17.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FB95E8B-CF01-471F-8306-BB9FB0896904"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird:17.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF7E092E-BCBE-48B4-8F6A-D3E4A0369AE1"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird:17.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB1D90B0-9E81-4828-8122-A66FB0953863"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird:17.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F3920CE-A546-4E95-9E00-46DE4C732F73"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "341D94CE-C0EB-47FA-A043-E7B0F4344BBB"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84C3EE07-F201-451A-89A1-A41B8B2165E6"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "45837B42-7D29-4475-94F1-E29CD5831C7F"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7028A433-7D1B-4C6F-A0F6-1B69682F7853"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86C07513-8F98-4FA6-837D-7D735AE5EA91"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1D87C70-0EC2-49DE-A59D-CAF22760BC9D"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61AE2EAA-55A4-4FC9-BC3F-0FEE5BB2DE99"
},
{
"criteria": "cpe:2.3:a:mozilla:thunderbird_esr:17.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCC56C1D-6F46-4B08-B085-E9E0D41DB8CA"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D56B932B-9593-44E2-B610-E4EB2143EB21"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DE8E7D74-0DCB-4633-B502-EDC2112229BA"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9DAA2E6F-A666-4136-8F6B-E35C313CAB2B"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "36559BC0-44D7-48B3-86FF-1BFF0257B5ED"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"evaluatorComment": "Per: http://cwe.mitre.org/data/definitions/426.html\n\nCWE-426: Untrusted Search Path",
"sourceIdentifier": "security@mozilla.org"
}