Stack-based buffer overflow in maintenanceservice.exe in the Mozilla Maintenance Service in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8 allows local users to gain privileges via a long pathname on the command line.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade firefoxUpgrade thunderbirdUpgrade seamonkeyUpgrade linux-firefox | Dec 10, 2025 | Aug 8, 2013 |
| Mfsa2013 66 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 17.0.8Upgrade to Mozilla Firefox version 23.0 | Aug 7, 2013 | Aug 6, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.20.0 | Dec 8, 2014 | Aug 6, 2013 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird ESR version 17.0.8Upgrade to Mozilla Thunderbird version 17.0.8Upgrade to the latest version of Mozilla Thunderbird | Aug 7, 2013 | Aug 6, 2013 |
| Suse | — | Upgrade mozilla-nssUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nss-develUpgrade mozilla-nsprUpgrade MozillaFirefoxUpgrade mozilla-nss-32bitUpgrade mozilla-nspr-develUpgrade mozilla-nss-toolsUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translations | Feb 17, 2015 | Aug 6, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub