CVE-2013-0772

The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) via a crafted GIF image.
Severity
UNKNOWN
AV:N/AC:M/Au:N/C:P/I:N/A:P
Atk. Vector
NETWORK
Atk. Complexity
MEDIUM
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
VendorProductVersion
mozillafirefox
𝑥
< 19.0
mozillaseamonkey
𝑥
< 2.16
opensuseopensuse
11.4
opensuseopensuse
12.1
opensuseopensuse
12.2
redhatenterprise_linux_aus
5.9
redhatenterprise_linux_desktop
5.0
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_eus
5.9
redhatenterprise_linux_eus
6.3
redhatenterprise_linux_server
5.0
redhatenterprise_linux_server
6.0
redhatenterprise_linux_workstation
5.0
redhatenterprise_linux_workstation
6.0
canonicalubuntu_linux
10.04
canonicalubuntu_linux
11.10
canonicalubuntu_linux
12.04
canonicalubuntu_linux
12.10
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
saucy
not-affected
raring
not-affected
quantal
Fixed 19.0+build1-0ubuntu0.12.10.1
released
precise
Fixed 19.0+build1-0ubuntu0.12.04.1
released
oneiric
Fixed 19.0+build1-0ubuntu0.11.10.1
released
lucid
Fixed 19.0+build1-0ubuntu0.10.04.1
released
hardy
ignored
seamonkey
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
ignored
lucid
ignored
hardy
ignored
thunderbird
saucy
not-affected
raring
not-affected
quantal
Fixed 17.0.3+build1-0ubuntu0.12.10.1
released
precise
Fixed 17.0.3+build1-0ubuntu0.12.04.1
released
oneiric
Fixed 17.0.3+build1-0ubuntu0.11.10.1
released
lucid
Fixed 17.0.3+build1-0ubuntu0.10.04.1
released
hardy
ignored
xulrunner-1.9.2
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
dne
lucid
ignored
hardy
ignored
xulrunner-2.0
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
dne
lucid
dne
hardy
dne