CVE-2013-0777 Use-after-free vulnerability in the nsDisplayBoxShadowOuter::Paint function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbi...
HighCVSS 9.3
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in the nsDisplayBoxShadowOuter::Paint function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | < 17.0.3 | 17.0.3 |
| mozilla Firefox | < 19.0 | 19.0 |
| mozilla seamonkey | < 2.16 | 2.16 |
| mozilla Thunderbird | < 17.0.3 | 17.0.3 |
| mozilla thunderbird esr | < 17.0.3 | 17.0.3 |
| opensuse | = 11.4 | No fix listed |
| opensuse | = 12.1 | No fix listed |
| opensuse | = 12.2 | No fix listed |
| Canonical Ubuntu Linux | = 10.04 | No fix listed |
| Canonical Ubuntu Linux | = 11.10 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 12.10 | No fix listed |
References
- openSUSE-SU-2013:0323 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2013:0324 mailing-list third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- USN-1729-1 third-party-advisory vendor-advisory
- USN-1729-2 third-party-advisory vendor-advisory
- USN-1748-1 third-party-advisory vendor-advisory
- bugzilla.mozilla.org exploit issue-tracking patch vendor-advisory
- oval:org.mitre.oval:def:16977 signature third-party-advisory vdb-entry