What is the CVSS score of CVE-2013-0776?

CVE-2013-0776 has a CVSS 2.0 base score of 4.0 (Medium). CVSS vector: AV:N/AC:H/Au:N/C:P/I:P/A:N. EPSS exploitation probability: 0.7%.

Is there a patch available for CVE-2013-0776?

Yes, a patch is available for CVE-2013-0776. Update the affected software to the latest version immediately.

Firefox CVE-2013-0776

MEDIUM

Improper Certificate Validation (CWE-295)

2013-02-19 security@mozilla.org

Mozilla Information Disclosure Firefox Seamonkey Thunderbird Thunderbird Esr Opensuse Enterprise Linux Aus Enterprise Linux Desktop Enterprise Linux Eus Enterprise Linux Server Enterprise Linux Workstation Debian Linux Ubuntu Linux

4.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

4.0 MEDIUM

AV:N/AC:H/Au:N/C:P/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:H/Au:N/C:P/I:P/A:N

Attack Vector

Network

Attack Complexity

High

Confidentiality

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Feb 19, 2013 - 23:55 cve.org

MEDIUM 4.0

DescriptionCVE.org

Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web script, as demonstrated by a phishing attack on an HTTPS site.

AnalysisAI

Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable.

Technical ContextAI

This vulnerability is classified under CWE-295. Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web script, as demonstrated by a phishing attack on an HTTPS site. Affected products include: Mozilla Firefox, Mozilla Seamonkey, Mozilla Thunderbird, Mozilla Thunderbird Esr, Opensuse. Version information: before 19.0.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.