CVE-2013-0772

EUVD-2013-0783
The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) via a crafted GIF image.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
Affected Products (NVD)
VendorProductVersion
mozillafirefox
𝑥
< 19.0
mozillaseamonkey
𝑥
< 2.16
opensuseopensuse
11.4
opensuseopensuse
12.1
opensuseopensuse
12.2
redhatenterprise_linux_aus
5.9
redhatenterprise_linux_desktop
5.0
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_eus
5.9
redhatenterprise_linux_eus
6.3
redhatenterprise_linux_server
5.0
redhatenterprise_linux_server
6.0
redhatenterprise_linux_workstation
5.0
redhatenterprise_linux_workstation
6.0
canonicalubuntu_linux
10.04
canonicalubuntu_linux
11.10
canonicalubuntu_linux
12.04
canonicalubuntu_linux
12.10
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
hardy
ignored
lucid
Fixed 19.0+build1-0ubuntu0.10.04.1
released
oneiric
Fixed 19.0+build1-0ubuntu0.11.10.1
released
precise
Fixed 19.0+build1-0ubuntu0.12.04.1
released
quantal
Fixed 19.0+build1-0ubuntu0.12.10.1
released
raring
not-affected
saucy
not-affected
seamonkey
hardy
ignored
lucid
ignored
oneiric
ignored
precise
dne
quantal
dne
raring
dne
saucy
dne
thunderbird
hardy
ignored
lucid
Fixed 17.0.3+build1-0ubuntu0.10.04.1
released
oneiric
Fixed 17.0.3+build1-0ubuntu0.11.10.1
released
precise
Fixed 17.0.3+build1-0ubuntu0.12.04.1
released
quantal
Fixed 17.0.3+build1-0ubuntu0.12.10.1
released
raring
not-affected
saucy
not-affected
xulrunner-1.9.2
hardy
ignored
lucid
ignored
oneiric
dne
precise
dne
quantal
dne
raring
dne
saucy
dne
xulrunner-2.0
hardy
dne
lucid
dne
oneiric
dne
precise
dne
quantal
dne
raring
dne
saucy
dne