CVE-2013-0782

EUVD-2013-0793
Heap-based buffer overflow in the nsSaveAsCharset::DoCharsetConversion function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
Affected Products (NVD)
VendorProductVersion
mozillafirefox
𝑥
< 17.0.3
mozillafirefox
𝑥
< 19.0
mozillaseamonkey
𝑥
< 2.16
mozillathunderbird
𝑥
< 17.0.3
mozillathunderbird_esr
𝑥
< 17.0.3
opensuseopensuse
11.4
opensuseopensuse
12.1
opensuseopensuse
12.2
redhatenterprise_linux_aus
5.9
redhatenterprise_linux_desktop
5.0
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_eus
5.9
redhatenterprise_linux_eus
6.3
redhatenterprise_linux_server
5.0
redhatenterprise_linux_server
6.0
redhatenterprise_linux_workstation
5.0
redhatenterprise_linux_workstation
6.0
debiandebian_linux
7.0
canonicalubuntu_linux
10.04
canonicalubuntu_linux
11.10
canonicalubuntu_linux
12.04
canonicalubuntu_linux
12.10
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
hardy
ignored
lucid
Fixed 19.0+build1-0ubuntu0.10.04.1
released
oneiric
Fixed 19.0+build1-0ubuntu0.11.10.1
released
precise
Fixed 19.0+build1-0ubuntu0.12.04.1
released
quantal
Fixed 19.0+build1-0ubuntu0.12.10.1
released
raring
not-affected
saucy
not-affected
seamonkey
hardy
ignored
lucid
ignored
oneiric
ignored
precise
dne
quantal
dne
raring
dne
saucy
dne
thunderbird
hardy
ignored
lucid
Fixed 17.0.3+build1-0ubuntu0.10.04.1
released
oneiric
Fixed 17.0.3+build1-0ubuntu0.11.10.1
released
precise
Fixed 17.0.3+build1-0ubuntu0.12.04.1
released
quantal
Fixed 17.0.3+build1-0ubuntu0.12.10.1
released
raring
not-affected
saucy
not-affected
xulrunner-1.9.2
hardy
ignored
lucid
ignored
oneiric
dne
precise
dne
quantal
dne
raring
dne
saucy
dne
xulrunner-2.0
hardy
dne
lucid
dne
oneiric
dne
precise
dne
quantal
dne
raring
dne
saucy
dne