2013-01-13 21:55:02 2017-09-19 03:35:46

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not prevent modifications to the prototype of an object, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by referencing Object.prototype.__proto__ in a crafted HTML document.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE
Mozilla Thunderbird 2.0.0.11 Mozilla Thunderbird 2.0.0.14 Mozilla Thunderbird 2.0.0.13 Mozilla Firefox 2.0.0.19 Mozilla Thunderbird 17.0 Mozilla Thunderbird 2.0.0.16 Mozilla Seamonkey 1.0 Alpha (not an official CPE) Mozilla Firefox 1.5.7 Mozilla Firefox 1.4.1 Mozilla Firefox 1.5.6 Mozilla Firefox 0.9 rc Mozilla Firefox 1.5.8 Mozilla Thunderbird 2.0.0.19 Mozilla Firefox 4.0 beta10 Mozilla Firefox 4.0 beta1 Mozilla Firefox 4.0 beta2 Mozilla Firefox 4.0 beta3 Mozilla Firefox 4.0 beta4 Mozilla Firefox 4.0 beta5 Mozilla Firefox 4.0 beta6 Mozilla Firefox 4.0 beta7 Mozilla Firefox 4.0 beta8 Mozilla Firefox 4.0 beta9 Mozilla Thunderbird 2.0.0.23 Mozilla Thunderbird 2.0.0.22 Mozilla Firefox 15.0.1 Mozilla Firefox 9.0 Mozilla Thunderbird 2.0.0.21 Mozilla Thunderbird 2.0.0.20 Mozilla Firefox 12.0 Mozilla SeaMonkey 2.3.3 Mozilla Firefox 10.0.2 Mozilla Firefox 15.0 Mozilla Firefox 10.0.1 Mozilla Firefox 3.6.14 Mozilla Firefox 3.6.12 Mozilla Firefox 3.6.15 Mozilla Firefox 3.6.13 Mozilla Firefox 3.6.17 Mozilla Firefox 3.6.10 Mozilla Firefox 3.6.11 Mozilla SeaMonkey 2.3.1 Mozilla SeaMonkey 2.3.2 Mozilla Firefox 3.6.18 Mozilla Firefox 3.6.16 Mozilla Firefox 3.6.19 Mozilla Thunderbird 15.0 Mozilla Firefox 3.5.6 Mozilla Firefox 3.6.25 Mozilla Firefox 3.6.20 Mozilla Firefox 3.5.4 Mozilla Firefox 3.6.23 Mozilla Firefox 3.5.7 Mozilla Firefox 3.6.24 Mozilla Firefox 4.0 beta11 Mozilla Firefox 4.0 beta12 Mozilla Firefox 3.6.21 Mozilla Firefox 3.6.22 Mozilla Thunderbird 12.0.1 Mozilla Thunderbird 15.0.1 Mozilla Firefox 3.5.9 Mozilla Firefox 3.5.5 Mozilla Firefox 3.5.8 Mozilla SeaMonkey 2.4.1 Mozilla SeaMonkey 1.5.0.8 Mozilla SeaMonkey 1.5.0.9 Mozilla Thunderbird 16.0 Mozilla Seamonkey 1.0.99 (not an official CPE) Mozilla Firefox 2.0.0.9 Mozilla Firefox 12.0 beta6 Mozilla Firefox 13.0 Mozilla Firefox 0.10 Mozilla Thunderbird 2.0 Mozilla Firefox 17.0.1 Mozilla Firefox 1.0.2 Mozilla Firefox 3.5.14 Mozilla Firefox 3.5.11 Mozilla Firefox 1.0.1 Mozilla Firefox 3.5.13 Mozilla Firefox 3.5.12 Mozilla Firefox 1.0.7 Mozilla Firefox 1.0.4 Mozilla Firefox 3.5.10 Mozilla Firefox 1.0.8 Mozilla Firefox 1.0.6 Mozilla Firefox 1.0.3 Mozilla Firefox 3.5.15 Mozilla Firefox 1.0.5 Mozilla SeaMonkey 2.10.1 Mozilla Thunderbird 3.1.16 Mozilla Thunderbird 3.1.10 Mozilla Mozilla Mail 1.7.1 Mozilla SeaMonkey 1.5.0.10 Mozilla Mozilla Mail 1.7.3 Mozilla Thunderbird 3.0 Mozilla Thunderbird 3.1.13 Mozilla Thunderbird 3.1.11 Mozilla Thunderbird 3.1 Mozilla Thunderbird 3.1.14 Mozilla Thunderbird 3.1.17 Mozilla Thunderbird 3.1.12 Mozilla Thunderbird 3.1.15 Mozilla Firefox 5.0 Mozilla SeaMonkey 2.1 alpha3 Mozilla SeaMonkey 2.1 alpha2 Mozilla SeaMonkey 2.1 alpha1 Mozilla Firefox 1.5.5 Mozilla Firefox 1.5.2 Mozilla Firefox 1.5.4 Mozilla Firefox 1.5.3 Mozilla Thunderbird 1.5 Beta 2 Mozilla Firefox 1.5.1 Mozilla Firefox 2.0.0.8 Mozilla SeaMonkey 2.2 Beta 3 Mozilla SeaMonkey 2.9 Beta 1 Mozilla Thunderbird 0.7 Mozilla SeaMonkey 2.8 Beta 1 Mozilla SeaMonkey 2.9 Beta 2 Mozilla Thunderbird 0.6 Mozilla SeaMonkey 2.8 Beta 2 Mozilla SeaMonkey 2.9 Beta 3 Mozilla Thunderbird 0.9 Mozilla SeaMonkey 2.7.1 Mozilla SeaMonkey 2.8 Beta 3 Mozilla SeaMonkey 2.9 beta4 Mozilla Thunderbird 0.8 Mozilla SeaMonkey 2.5 Beta 1 Mozilla SeaMonkey 2.7.2 Mozilla SeaMonkey 2.8 Beta 4 Mozilla SeaMonkey 2.4 Beta 1 Mozilla SeaMonkey 2.5 Beta 2 Mozilla SeaMonkey 2.8 Beta 5 Mozilla SeaMonkey 2.4 Beta 2 Mozilla SeaMonkey 2.5 Beta 3 Mozilla SeaMonkey 2.7 Beta 1 Mozilla SeaMonkey 2.8 Beta 6 Mozilla SeaMonkey 2.4 Beta 3 Mozilla SeaMonkey 2.5 Beta 4 Mozilla SeaMonkey 2.6 Beta 1 Mozilla SeaMonkey 2.7 Beta 2 Mozilla SeaMonkey 2.6 Beta 2 Mozilla SeaMonkey 2.7 Beta 3 Mozilla SeaMonkey 2.6 Beta 3 Mozilla SeaMonkey 2.7 Beta 4 Mozilla SeaMonkey 2.6 Beta 4 Mozilla SeaMonkey 2.7 Beta 5 Mozilla Thunderbird 0.3 Mozilla Seamonkey 2.15 beta5 Mozilla Thunderbird 0.2 Mozilla Seamonkey 2.15 beta6 Mozilla Thunderbird 0.5 Mozilla SeaMonkey 2.0 Alpha 1 Mozilla Thunderbird 0.4 Mozilla SeaMonkey 2.1 Beta 1 Mozilla SeaMonkey 2.0 Alpha 3 Mozilla SeaMonkey 2.1 Beta 2 Mozilla Seamonkey 2.15 beta1 Mozilla SeaMonkey 2.0 Alpha 2 Mozilla SeaMonkey 2.1 Beta 3 Mozilla SeaMonkey 2.3 Beta1 Mozilla Seamonkey 2.15 beta2 Mozilla Thunderbird 0.1 Mozilla SeaMonkey 2.2 Beta 1 Mozilla SeaMonkey 2.3 Beta 2 Mozilla Seamonkey 2.15 beta3 Mozilla SeaMonkey 2.2 Beta 2 Mozilla SeaMonkey 2.3 Beta 3 Mozilla Seamonkey 2.15 beta4 Mozilla SeaMonkey 1.0.6 Mozilla SeaMonkey 2.11 beta5 Mozilla SeaMonkey 2.12 beta6 Mozilla SeaMonkey 2.13 beta3 Mozilla Seamonkey 2.14 beta4 Mozilla SeaMonkey 1.0.5 Mozilla SeaMonkey 2.10 beta1 Mozilla SeaMonkey 2.11 beta6 Mozilla SeaMonkey 2.13 beta4 Mozilla Seamonkey 2.14 beta5 Mozilla SeaMonkey 2.10 beta2 Mozilla SeaMonkey 2.13 beta5 Mozilla SeaMonkey 2.10 beta3 Mozilla SeaMonkey 2.13 beta6 Mozilla SeaMonkey 2.11 beta1 Mozilla SeaMonkey 2.12 beta2 Mozilla SeaMonkey 2.11 beta2 Mozilla SeaMonkey 2.12 beta3 Mozilla Seamonkey 2.14 beta1 Mozilla SeaMonkey 2.11 beta3 Mozilla SeaMonkey 2.12 beta4 Mozilla SeaMonkey 2.13 beta1 Mozilla Seamonkey 2.14 beta2 Mozilla SeaMonkey 2.11 beta4 Mozilla SeaMonkey 2.12 beta5 Mozilla SeaMonkey 2.13 beta2 Mozilla Seamonkey 2.14 beta3 Mozilla SeaMonkey 2.12 beta1 Mozilla SeaMonkey 1.0.2 Mozilla SeaMonkey 1.0.1 Mozilla SeaMonkey 1.0 alpha Mozilla Firefox 8.0 Mozilla SeaMonkey 1.1 alpha Mozilla Firefox 4.0.1 Mozilla Thunderbird 3.0.11 Mozilla Firefox 11.0 Mozilla SeaMonkey 1.0.9 Mozilla SeaMonkey 1.0.4 Mozilla SeaMonkey 1.0.3 Mozilla SeaMonkey 1.0.8 Mozilla SeaMonkey 1.0.7 Mozilla Thunderbird 3.0.10 Mozilla Firefox 14.0 Mozilla Thunderbird 1.5 Mozilla Seamonkey 1.1.5 1.1.10 (not an official CPE) Mozilla SeaMonkey 2.9.1 Mozilla Firefox 1.5.0.6 Mozilla Thunderbird 1.0 Mozilla Firefox 1.5.0.4 Mozilla Firefox 1.5.0.7 Mozilla Firefox 1.5.0.2 Mozilla Thunderbird 9.0.1 Mozilla Firefox 1.5.0.3 Mozilla Firefox 14.0.1 Mozilla Firefox 1.5.0.1 Mozilla Firefox 6.0.2 Mozilla Thunderbird 1.0.5 Beta Mozilla Seamonkey 1.0 Beta (not an official CPE) Mozilla Thunderbird 13.0.1 Mozilla Firefox 6.0.1 Mozilla Firefox 1.5.0.12 Mozilla Thunderbird 6.0 Mozilla Firefox 1.5.0.11 Mozilla Thunderbird 2.0.0.5 Mozilla Thunderbird 2.0.0.4 Mozilla Thunderbird 2.0.0.7 Mozilla Thunderbird 2.0.0.6 Mozilla Thunderbird 2.0.0.1 Mozilla Thunderbird 2.0.0.0 Mozilla Thunderbird 2.0.0.3 Mozilla SeaMonkey 1.1.17 Mozilla Thunderbird 2.0.0.2 Mozilla Seamonkey 1.1.18 Mozilla Seamonkey 1.1.19 Mozilla Firefox 1.5.0.10 Mozilla SeaMonkey 2.12.1 Mozilla Thunderbird 1.5.0.10 Mozilla Firefox 1.5.0.5 Mozilla Firefox 1.5.0.8 Mozilla Thunderbird 3.0.6 Mozilla Thunderbird 1.5.0.14 Mozilla Thunderbird 1.5.0.11 Mozilla Firefox 1.5.0.9 Mozilla Thunderbird 1.5.0.13 Mozilla Thunderbird 1.5.0.12 Mozilla Thunderbird 1.5.0.1 Mozilla Thunderbird 3.1.8 Mozilla Thunderbird 1.5.0.3 Mozilla Thunderbird 1.5.0.2 Mozilla Firefox 6.0 Mozilla Thunderbird 3.1.9 Mozilla Thunderbird 3.0.1 Mozilla Thunderbird 3.0.4 Mozilla Thunderbird 3.0.3 Mozilla Thunderbird 3.0.5 Mozilla Thunderbird 3.0.8 Mozilla Firefox Extended Support Release (ESR) 17.0.1 Mozilla Thunderbird 3.0.7 Mozilla Thunderbird 3.0.2 Mozilla SeaMonkey 2.6.1 Mozilla Thunderbird 7.0 Mozilla Firefox 2.0.0.2 Mozilla Firefox 2.0.0.3 Mozilla Firefox 2.0.0.6 Mozilla Firefox 2.0.0.1 Mozilla SeaMonkey 1.1.13 Mozilla Firefox 2.0.0.4 Mozilla SeaMonkey 1.1.14 Mozilla Firefox 2.0.0.7 Mozilla SeaMonkey 1.1.15 Mozilla SeaMonkey 1.1.16 Mozilla Firefox 2.0.0.5 Mozilla SeaMonkey 1.1.10 Mozilla SeaMonkey 1.1.11 Mozilla SeaMonkey 1.1.12 Mozilla Firefox 1.0 Preview Release Mozilla Seamonkey 1.1.4 Mozilla Seamonkey 1.1.5 Mozilla Thunderbird 10.0 Mozilla Firefox 0.10.1 Mozilla SeaMonkey 2.0 Beta 2 Mozilla SeaMonkey 2.0 Beta 1 Mozilla Thunderbird 3.0.9 Mozilla Seamonkey 1.1.1 Mozilla Seamonkey 1.0 Dev (not an official CPE) Mozilla Firefox 5.0.1 Mozilla Firefox 1.5 Mozilla Thunderbird 1.5.0.9 Mozilla Firefox 0.9.3 Mozilla Firefox 1.8 Mozilla SeaMonkey 1.1.8 Mozilla Thunderbird 1.5.0.8 Mozilla SeaMonkey 1.1.9 Mozilla Seamonkey 1.1.2 Mozilla Seamonkey 1.1.3 Mozilla Thunderbird Extended Support Release (ESR) 17.0.1 Mozilla Thunderbird 1.5.0.5 Mozilla Thunderbird 1.5.0.4 Mozilla Thunderbird 1.5.0.7 Mozilla Seamonkey 1.1.6 Mozilla Thunderbird 1.5.0.6 Mozilla Seamonkey 1.1.7 Mozilla Firefox 1.0 Mozilla Firefox 16.0.2 Mozilla Firefox 16.0.1 Mozilla SeaMonkey 1.1 beta Mozilla Seamonkey 2.14.1 (not an official CPE) Mozilla Firefox 8.0.1 Mozilla Firefox 4.0 Mozilla Thunderbird 0.7.3 Mozilla Thunderbird 0.7.1 Mozilla SeaMonkey 2.6 Mozilla SeaMonkey 2.7 Mozilla SeaMonkey 2.4 Mozilla SeaMonkey 2.5 Mozilla SeaMonkey 1.0 beta Mozilla Thunderbird 0.7.2 Mozilla SeaMonkey 2.8 Mozilla SeaMonkey 2.9 Mozilla SeaMonkey 2.2 Mozilla SeaMonkey 2.3 Mozilla Seamonkey 2.0a1 Pre (not an official CPE) Mozilla SeaMonkey 2.0 Mozilla SeaMonkey 2.1 Mozilla SeaMonkey 2.0.13 Mozilla SeaMonkey 2.0.14 Mozilla Firefox 0.7.1 Mozilla Thunderbird 7.0.1 Mozilla SeaMonkey 2.0.10 Mozilla Firefox 10.0 Mozilla Thunderbird 1.5.2 Mozilla Thunderbird 5.0 Mozilla SeaMonkey 2.0.11 Mozilla SeaMonkey 2.0.12 Mozilla Thunderbird 2.0.0.9 Mozilla Thunderbird 2.0.0.8 Mozilla Thunderbird 1.5.1 Mozilla SeaMonkey 2.12 Mozilla Seamonkey 2.0a1pre (not an official CPE) Mozilla SeaMonkey 2.11 Mozilla Thunderbird 3.1.5 Mozilla Seamonkey 2.14 Mozilla SeaMonkey 2.13 Mozilla Thunderbird 3.1.3 Mozilla Firefox 7.0 Mozilla SeaMonkey 2.10 Mozilla Thunderbird 3.1.2 Mozilla Thunderbird 3.1.4 Mozilla Thunderbird 3.1.7 Mozilla Thunderbird 3.1.6 Mozilla Thunderbird 3.1.1 Mozilla Thunderbird 2.0.0.12 Mozilla Thunderbird 2.0.0.17 Mozilla Thunderbird 2.0.0.18 Mozilla Firefox 9.0.1 Mozilla Firefox 2.0.0.20 Mozilla Thunderbird 2.0.0.15 Mozilla Firefox 2.0.0.16 Mozilla Firefox 2.0.0.18 Mozilla Firefox 2.0.0.15 Mozilla Firefox 2.0.0.12 Mozilla Firefox 2.0.0.17 Mozilla Firefox 3.6 Mozilla Firefox 2.0.0.14 Mozilla Firefox 2.0.0.11 Mozilla Firefox 3.5 Mozilla Firefox 2.0.0.13 Mozilla SeaMonkey 2.1 Release Candidate 1 Mozilla SeaMonkey 2.1 Release Candidate 2 Mozilla SeaMonkey 2.0 RC1 Mozilla Firefox 3.0.9 Mozilla SeaMonkey 2.0 RC2 Mozilla Firefox 3.0 Mozilla Firefox 2.0.0.10 Mozilla Firefox 1.5 Beta 2 Mozilla Firefox 1.5 Beta 1 Mozilla Thunderbird 12.0 Mozilla Firefox 3.0.7 Mozilla Firefox 3.0.16 Mozilla Firefox Extended Support Release (ESR) 17.0 Mozilla Firefox 3.0.2 Mozilla Firefox 3.0.11 Mozilla Firefox 3.0.5 Mozilla Firefox 3.0.14 Mozilla Firefox 3.0.17 Mozilla Firefox 3.0.8 Mozilla SeaMonkey 2.0.4 Mozilla Firefox 3.0.15 Mozilla Firefox 3.0.6 Mozilla SeaMonkey 2.13.1 Mozilla SeaMonkey 2.0.5 Mozilla Seamonkey 2.13.2 Mozilla Firefox 3.0.3 Mozilla Firefox 3.0.12 Mozilla Firefox 3.0.1 Mozilla Firefox 3.0.10 Mozilla Firefox 3.0.4 Mozilla Firefox 3.0.13 Mozilla SeaMonkey 2.0.1 Mozilla SeaMonkey 2.0.8 Mozilla SeaMonkey 2.0.9 Mozilla Thunderbird 9.0 Mozilla SeaMonkey 2.0.2 Mozilla SeaMonkey 2.0.3 Mozilla SeaMonkey 2.0.6 Mozilla SeaMonkey 2.0.7 Mozilla Firefox 0.1 Mozilla Firefox 0.7 Mozilla Firefox 0.9 Mozilla Firefox 0.6 Mozilla Firefox 0.8 Mozilla Thunderbird 10.0.2 Mozilla Thunderbird 10.0.3 Mozilla Firefox 0.3 Mozilla Thunderbird 10.0.1 Mozilla Thunderbird 10.0.4 Mozilla Firefox 0.5 Mozilla Firefox 0.2 Mozilla Thunderbird 11.0 Mozilla Firefox 0.4 Mozilla Firefox 3.5.3 Mozilla Firefox 3.5.2 Mozilla Firefox 3.5.1 Mozilla Firefox 3.6.7 Mozilla Firefox 3.6.4 Mozilla Firefox 3.6.9 Mozilla Firefox 3.6.8 Mozilla Firefox 0.6.1 Mozilla Thunderbird 8.0 Mozilla SeaMonkey 1.1 Mozilla SeaMonkey 1.0 Mozilla Firefox 3.6.6 Mozilla Thunderbird 14.0 Mozilla Firefox 3.6.3 Mozilla Firefox 7.0.1 Mozilla Thunderbird 16.0.2 Mozilla Thunderbird 16.0.1 Mozilla Firefox 3.6.2 Mozilla Thunderbird 6.0.2 Mozilla Thunderbird 6.0.1 Mozilla Firefox 13.0.1 Mozilla Firefox 16.0 Mozilla Firefox 0.9.2 Mozilla Firefox 0.9.1 Mozilla Thunderbird 13.0 Mozilla Firefox 2.0 Mozilla Thunderbird Extended Support Release (ESR) 17.0 Mozilla Thunderbird 1.0.5 Mozilla Thunderbird 1.0.6 Mozilla Thunderbird 11.0.1 Mozilla Thunderbird 1.0.3 Mozilla Thunderbird 1.0.4 Mozilla Thunderbird 1.0.7 Mozilla Thunderbird 1.0.8 Mozilla Thunderbird 1.0.1 Mozilla Thunderbird 1.0.2