Lucene search

K

[email protected]NVD:CVE-2013-0750

HistoryJan 13, 2013 - 8:55 p.m.

CVE-2013-0750

2013-01-1320:55:01

CWE-190

[email protected]

web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.068 Low

EPSS

Percentile

93.9%

Integer overflow in the JavaScript implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted string concatenation, leading to improper memory allocation and a heap-based buffer overflow.

Affected configurations

NVD

Node

mozillafirefoxRange<18.0

OR

mozillafirefox_esrRange10.0–10.0.12

OR

mozillafirefox_esrRange17.0–17.0.2

OR

mozillaseamonkeyRange<2.15

OR

mozillathunderbirdRange<17.0.2

OR

mozillathunderbird_esrRange10.0–10.0.12

OR

mozillathunderbird_esrRange17.0–17.0.2

Node

opensuseopensuseMatch11.4

OR

opensuseopensuseMatch12.1

OR

opensuseopensuseMatch12.2

OR

suselinux_enterprise_desktopMatch10sp4

OR

suselinux_enterprise_desktopMatch11sp2

OR

suselinux_enterprise_serverMatch10sp4

OR

suselinux_enterprise_serverMatch11sp2-

OR

suselinux_enterprise_serverMatch11sp2vmware

OR

suselinux_enterprise_software_development_kitMatch10sp4

OR

suselinux_enterprise_software_development_kitMatch11sp2

Node

redhatenterprise_linux_desktopMatch5.0

OR

redhatenterprise_linux_desktopMatch6.0

OR

redhatenterprise_linux_eusMatch5.9

OR

redhatenterprise_linux_eusMatch6.3

OR

redhatenterprise_linux_serverMatch5.0

OR

redhatenterprise_linux_serverMatch6.0

OR

redhatenterprise_linux_server_ausMatch5.9

OR

redhatenterprise_linux_workstationMatch5.0

OR

redhatenterprise_linux_workstationMatch6.0

Node

canonicalubuntu_linuxMatch10.04-

OR

canonicalubuntu_linuxMatch11.10

OR

canonicalubuntu_linuxMatch12.04esm

OR

canonicalubuntu_linuxMatch12.10

References

lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html

lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html

lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html

lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html

rhn.redhat.com/errata/RHSA-2013-0144.html

rhn.redhat.com/errata/RHSA-2013-0145.html

www.mozilla.org/security/announce/2013/mfsa2013-12.html

www.ubuntu.com/usn/USN-1681-1

www.ubuntu.com/usn/USN-1681-2

www.ubuntu.com/usn/USN-1681-4

bugzilla.mozilla.org/show_bug.cgi?id=805121

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16957

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.068 Low

EPSS

Percentile

93.9%

Related for NVD:CVE-2013-0750

prion1 mozilla1 openvas37 cvelist1 zdi1 ubuntucve1 cve1 veracode3 nessus36 redhat2 centos2 oraclelinux2 suse7 ubuntu4 ibm2 securityvulns1 freebsd1 gentoo1