CVE-2013-0796

严重 10.0CVE-2013-0796 · Published 03/04/2013 · updated 16/06/2026

要点

CVE-2013-0796 是影响 firefox (mozilla), seamonkey (mozilla), thunderbird (mozilla) 的严重 (CVSS 10.0)漏洞。
未来 30 天内被利用的概率（EPSS）：8.0%，高于 94.7% 的漏洞。
修复：升级到 17.0.5, 20.0, 2.17 或更高版本。

Package	Affected versions	Patched versions
firefox mozilla	`≥ 17.0, < 17.0.5< 20.0`	`17.0.520.0`
seamonkey mozilla	`< 2.17`	`2.17`
thunderbird mozilla	`≥ 17.0, < 17.0.5`	`17.0.5`
thunderbird esr mozilla	`≥ 17.0, < 17.0.5`	`17.0.5`

Description

The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (free of unallocated memory) via unspecified vectors.

References

lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html · Mailing List
lists.opensuse.org/opensuse-updates/2013-06/msg00012.html · Mailing List
rhn.redhat.com/errata/RHSA-2013-0696.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2013-0697.html · Third Party Advisory
debian.org/security/2013/dsa-2699 · Third Party Advisory
mozilla.org/security/announce/2013/mfsa2013-35.html · Exploit
ubuntu.com/usn/USN-1791-1 · Third Party Advisory
bugzilla.mozilla.org/show_bug.cgi · Exploit
bugzilla.mozilla.org/show_bug.cgi · Exploit

firefox 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free