Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-0777
HistoryFeb 20, 2013 - 12:00 a.m.

CVE-2013-0777

2013-02-2000:00:00
ubuntu.com
ubuntu.com
10

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.024

Percentile

90.0%

Use-after-free vulnerability in the nsDisplayBoxShadowOuter::Paint function
in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey
before 2.16 allows remote attackers to execute arbitrary code or cause a
denial of service (heap memory corruption) via unspecified vectors.

Notes

Author Note
jdstrand xulrunner-1.9.2 unmaintained upstream (see README.mozilla for details)
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchfirefox< 19.0+build1-0ubuntu0.10.04.1UNKNOWN
ubuntu11.10noarchfirefox< 19.0+build1-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchfirefox< 19.0+build1-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchfirefox< 19.0+build1-0ubuntu0.12.10.1UNKNOWN
ubuntu10.04noarchthunderbird< 17.0.3+build1-0ubuntu0.10.04.1UNKNOWN
ubuntu11.10noarchthunderbird< 17.0.3+build1-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchthunderbird< 17.0.3+build1-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchthunderbird< 17.0.3+build1-0ubuntu0.12.10.1UNKNOWN

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.024

Percentile

90.0%