CVE-2013-0760

Buffer overflow in the CharDistributionAnalysis::HandleOneChar function in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted document.
Classic Buffer Overflow
Severity
UNKNOWN
AV:N/AC:M/Au:N/C:C/I:C/A:C
Atk. Vector
NETWORK
Atk. Complexity
MEDIUM
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
VendorProductVersion
mozillafirefox
𝑥
< 10.0.11
mozillafirefox
𝑥
< 18.0
mozillafirefox
17.0 ≤
𝑥
< 17.0.2
mozillaseamonkey
𝑥
< 2.15
mozillathunderbird
𝑥
< 17.0.2
mozillathunderbird_esr
𝑥
< 10.0.12
mozillathunderbird_esr
17.0 ≤
𝑥
< 17.0.2
opensuseopensuse
11.4
opensuseopensuse
12.1
opensuseopensuse
12.2
canonicalubuntu_linux
10.04
canonicalubuntu_linux
11.10
canonicalubuntu_linux
12.04
canonicalubuntu_linux
12.10
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
saucy
Fixed 19.0~b1+build2-0ubuntu1
released
raring
Fixed 19.0~b1+build2-0ubuntu1
released
quantal
Fixed 18.0+build1-0ubuntu0.12.10.3
released
precise
Fixed 18.0+build1-0ubuntu0.12.04.3
released
oneiric
Fixed 18.0+build1-0ubuntu0.11.10.3
released
lucid
Fixed 18.0+build1-0ubuntu0.10.04.3
released
hardy
ignored
seamonkey
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
ignored
lucid
ignored
hardy
ignored
thunderbird
saucy
Fixed 17.0.2+build1-0ubuntu1
released
raring
Fixed 17.0.2+build1-0ubuntu1
released
quantal
Fixed 17.0.2+build1-0ubuntu0.12.10.1
released
precise
Fixed 17.0.2+build1-0ubuntu0.12.04.1
released
oneiric
Fixed 17.0.2+build1-0ubuntu0.11.10.1
released
lucid
Fixed 17.0.2+build1-0ubuntu0.10.04.1
released
hardy
ignored