CVE-2013-0796

The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (free of unallocated memory) via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
mozillaCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
VendorProductVersion
mozillafirefox
𝑥
< 20.0
mozillafirefox
17.0 ≤
𝑥
< 17.0.5
mozillathunderbird
17.0 ≤
𝑥
< 17.0.5
mozillathunderbird_esr
17.0 ≤
𝑥
< 17.0.5
mozillaseamonkey
𝑥
< 2.17
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
saucy
Fixed 20.0+build1-0ubuntu1
released
raring
Fixed 20.0+build1-0ubuntu1
released
quantal
Fixed 20.0+build1-0ubuntu0.12.10.3
released
precise
Fixed 20.0+build1-0ubuntu0.12.04.3
released
oneiric
Fixed 20.0+build1-0ubuntu0.11.10.3
released
lucid
Fixed 20.0+build1-0ubuntu0.10.04.3
released
hardy
ignored
seamonkey
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
ignored
lucid
ignored
hardy
ignored
thunderbird
saucy
Fixed 17.0.5+build1-0ubuntu1
released
raring
Fixed 17.0.5+build1-0ubuntu1
released
quantal
Fixed 17.0.5+build1-0ubuntu0.12.10.1
released
precise
Fixed 17.0.5+build1-0ubuntu0.12.04.1
released
oneiric
Fixed 17.0.5+build1-0ubuntu0.11.10.1
released
lucid
Fixed 17.0.5+build1-0ubuntu0.10.04.1
released
hardy
ignored
xulrunner-1.9.2
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
dne
lucid
ignored
hardy
ignored
xulrunner-2.0
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
dne
lucid
dne
hardy
dne