CVE-2013-0767

严重 10.0CVE-2013-0767 · Published 13/01/2013 · updated 16/06/2026

要点

CVE-2013-0767 是影响 firefox (mozilla), seamonkey (mozilla), thunderbird (mozilla) 的严重 (CVSS 10.0)漏洞。
未来 30 天内被利用的概率（EPSS）：5.8%，高于 93.2% 的漏洞。
修复：升级到 10.0.12, 17.0.2, 18.0, 2.15 或更高版本。

Package	Affected versions	Patched versions
firefox mozilla	`≥ 10.0, < 10.0.12≥ 17.0, < 17.0.2< 18.0`	`10.0.1217.0.218.0`
seamonkey mozilla	`< 2.15`	`2.15`
thunderbird mozilla	`< 17.0.2`	`17.0.2`
thunderbird esr mozilla	`≥ 10.0, < 10.0.12≥ 17.0, < 17.0.2`	`10.0.1217.0.2`

Description

The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.

References

lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html · Mailing List
rhn.redhat.com/errata/RHSA-2013-0144.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2013-0145.html · Third Party Advisory
mozilla.org/security/announce/2013/mfsa2013-02.html · Vendor Advisory
securityfocus.com/bid/57195 · Third Party Advisory
ubuntu.com/usn/USN-1681-1 · Third Party Advisory
ubuntu.com/usn/USN-1681-2 · Third Party Advisory
ubuntu.com/usn/USN-1681-4 · Third Party Advisory
bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16171 · Third Party Advisory

firefox 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free