CVE-2013-0768

CRITIQUE 9.3CVE-2013-0768 · Published 13/01/2013 · updated 16/06/2026

En bref

CVE-2013-0768 est une vulnérabilité CRITIQUE (CVSS 9.3) touchant firefox (mozilla), seamonkey (mozilla), thunderbird (mozilla).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 7.6%, plus élevée que 94.6% des vulnérabilités.
Correctif : mettre à jour vers 17.0.2, 18.0, 2.15 ou plus récent.

Package	Affected versions	Patched versions
firefox mozilla	`< 17.0.2< 18.0`	`17.0.218.0`
seamonkey mozilla	`< 2.15`	`2.15`
thunderbird mozilla	`< 17.0.2`	`17.0.2`
thunderbird esr mozilla	`< 17.0.2`	`17.0.2`

Description

Stack-based buffer overflow in the Canvas implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via an HTML document that specifies invalid width and height values.

References

lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html · Mailing List
mozilla.org/security/announce/2013/mfsa2013-03.html · Vendor Advisory
ubuntu.com/usn/USN-1681-1 · Third Party Advisory
ubuntu.com/usn/USN-1681-2 · Third Party Advisory
ubuntu.com/usn/USN-1681-4 · Third Party Advisory
bugzilla.mozilla.org/show_bug.cgi · Exploit
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16990 · Third Party Advisory

Autres vulnérabilités de firefox

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free