CVE-2013-0752

严重 9.3CVE-2013-0752 · Published 13/01/2013 · updated 16/06/2026

要点

CVE-2013-0752 是影响 firefox (mozilla), seamonkey (mozilla), thunderbird (mozilla) 的严重 (CVSS 9.3)漏洞。
未来 30 天内被利用的概率（EPSS）：6.6%，高于 93.9% 的漏洞。
修复：升级到 17.0.2, 18.0, 2.15 或更高版本。

Package	Affected versions	Patched versions
firefox mozilla	`< 17.0.2< 18.0`	`17.0.218.0`
seamonkey mozilla	`< 2.15`	`2.15`
thunderbird mozilla	`< 17.0.2`	`17.0.2`
thunderbird esr mozilla	`< 17.0.2`	`17.0.2`

Description

Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XBL file with multiple bindings that have SVG content.

References

lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html · Mailing List
mozilla.org/security/announce/2013/mfsa2013-13.html · Vendor Advisory
ubuntu.com/usn/USN-1681-1 · Third Party Advisory
ubuntu.com/usn/USN-1681-2 · Third Party Advisory
ubuntu.com/usn/USN-1681-4 · Third Party Advisory
bugzilla.mozilla.org/show_bug.cgi · Exploit
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16694 · Third Party Advisory

firefox 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free