CVE-2013-0796 The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly....
HighCVSS 10.0
EPSS 8.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (free of unallocated memory) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | < 20.0 | 20.0 |
| mozilla Firefox | >= 17.0, < 17.0.5 | 17.0.5 |
| mozilla Thunderbird | >= 17.0, < 17.0.5 | 17.0.5 |
| mozilla thunderbird esr | >= 17.0, < 17.0.5 | 17.0.5 |
| mozilla seamonkey | < 2.17 | 2.17 |
References
- openSUSE-SU-2013:0630 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2013:0631 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2013:0645 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2013:0850 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2013:0875 mailing-list third-party-advisory vendor-advisory
- RHSA-2013:0696 third-party-advisory vendor-advisory
- RHSA-2013:0697 third-party-advisory vendor-advisory
- DSA-2699 third-party-advisory vendor-advisory
- www.mozilla.org exploit vendor-advisory
- USN-1791-1 third-party-advisory vendor-advisory
- bugzilla.mozilla.org exploit issue-tracking vendor-advisory
- bugzilla.mozilla.org exploit issue-tracking patch vendor-advisory