CVE-2013-1677

EUVD-2013-1704
The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 80%
Affected Products (NVD)
VendorProductVersion
mozillafirefox
𝑥
≤ 20.0.1
mozillafirefox
19.0
mozillafirefox
19.0.1
mozillafirefox
19.0.2
mozillafirefox
20.0
mozillafirefox
17.0
mozillafirefox
17.0.1
mozillafirefox
17.0.2
mozillafirefox
17.0.3
mozillafirefox
17.0.4
mozillafirefox
17.0.5
mozillathunderbird
𝑥
≤ 17.0.5
mozillathunderbird
17.0
mozillathunderbird
17.0.1
mozillathunderbird
17.0.2
mozillathunderbird
17.0.3
mozillathunderbird
17.0.4
mozillathunderbird_esr
17.0
mozillathunderbird_esr
17.0.1
mozillathunderbird_esr
17.0.2
mozillathunderbird_esr
17.0.3
mozillathunderbird_esr
17.0.4
mozillathunderbird_esr
17.0.5
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
lucid
ignored
precise
Fixed 21.0+build1-0ubuntu0.12.04.3
released
quantal
Fixed 21.0+build1-0ubuntu0.12.10.2
released
raring
Fixed 21.0+build1-0ubuntu0.12.04.2
released
seamonkey
lucid
ignored
precise
dne
quantal
dne
raring
dne
thunderbird
lucid
ignored
precise
Fixed 17.0.6+build1-0ubuntu0.12.04.1
released
quantal
Fixed 17.0.6+build1-0ubuntu0.12.10.1
released
raring
Fixed 17.0.6+build1-0ubuntu0.13.04.1
released
xulrunner-1.9.2
lucid
ignored
precise
dne
quantal
dne
raring
dne
Common Weakness Enumeration
References