Lucene search

K

[email protected]NVD:CVE-2013-0763

HistoryJan 13, 2013 - 8:55 p.m.

CVE-2013-0763

2013-01-1320:55:02

CWE-416

[email protected]

web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.2%

Use-after-free vulnerability in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to Mesa drivers and a resized WebGL canvas.

Affected configurations

NVD

Node

mozillafirefoxRange<18.0

OR

mozillafirefox_esrRange10.0–10.0.12

OR

mozillafirefox_esrRange17.0–17.0.2

OR

mozillaseamonkeyRange<2.15

OR

mozillathunderbirdRange<17.0.2

OR

mozillathunderbird_esrRange10.0–10.0.12

OR

mozillathunderbird_esrRange17.0–17.0.2

Node

opensuseopensuseMatch11.4

OR

opensuseopensuseMatch12.1

OR

opensuseopensuseMatch12.2

OR

suselinux_enterprise_desktopMatch10sp4

OR

suselinux_enterprise_desktopMatch11sp2

OR

suselinux_enterprise_serverMatch10sp4

OR

suselinux_enterprise_serverMatch11sp2-

OR

suselinux_enterprise_serverMatch11sp2vmware

OR

suselinux_enterprise_software_development_kitMatch10sp4

OR

suselinux_enterprise_software_development_kitMatch11sp2

Node

redhatenterprise_linux_desktopMatch5.0

OR

redhatenterprise_linux_desktopMatch6.0

OR

redhatenterprise_linux_eusMatch5.9

OR

redhatenterprise_linux_eusMatch6.3

OR

redhatenterprise_linux_serverMatch5.0

OR

redhatenterprise_linux_serverMatch6.0

OR

redhatenterprise_linux_server_ausMatch5.9

OR

redhatenterprise_linux_workstationMatch5.0

OR

redhatenterprise_linux_workstationMatch6.0

Node

canonicalubuntu_linuxMatch10.04-

OR

canonicalubuntu_linuxMatch11.10

OR

canonicalubuntu_linuxMatch12.04esm

OR

canonicalubuntu_linuxMatch12.10

References

lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html

lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html

lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html

lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html

www.mozilla.org/security/announce/2013/mfsa2013-02.html

www.ubuntu.com/usn/USN-1681-1

www.ubuntu.com/usn/USN-1681-2

www.ubuntu.com/usn/USN-1681-4

bugzilla.mozilla.org/show_bug.cgi?id=791905

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17107

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.2%

Related for NVD:CVE-2013-0763

cve1 seebug1 ubuntucve1 prion1 cvelist1 openvas21 mozilla1 nessus25 suse7 freebsd1 ubuntu4 securityvulns1 gentoo1