CVEvulnerability

CVE-2013-0760

9.3 HIGH Published 2013-01-13 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-01-13
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-120

Description

Buffer overflow in the CharDistributionAnalysis::HandleOneChar function in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted document.

Affected configurations

• mozilla firefox (< 10.0.11) • mozilla firefox (< 18.0) • mozilla firefox (>= 17.0 < 17.0.2) • mozilla seamonkey (< 2.15) • mozilla thunderbird (< 17.0.2) • mozilla thunderbird esr (< 10.0.12) • mozilla thunderbird esr (>= 17.0 < 17.0.2) • opensuse opensuse 11.4 • opensuse opensuse 12.1 • opensuse opensuse 12.2 • suse linux enterprise desktop 10 • suse linux enterprise desktop 11 • suse linux enterprise server 10 • suse linux enterprise server 11 • suse linux enterprise software development kit 10 • suse linux enterprise software development kit 11 • canonical ubuntu linux 10.04 • canonical ubuntu linux 11.10 • canonical ubuntu linux 12.04 • canonical ubuntu linux 12.10

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References